CVE-2024-13723 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The "NagVis" component within Checkmk is vulnerable to remote code execution. An authenticated attacker with administrative level privileges is able to upload a…
High CVSS: 7.2

CVE-2024-13723

The "NagVis" component within Checkmk is vulnerable to remote code execution. An authenticated attacker with administrative level privileges is able to upload a malicious PHP file and modify specific settings to execute the contents of the file as PHP.
Vendor
-
Product
-
CWE
CWE-434
Yayın Tarihi
2025-02-04 22:15:40
Güncelleme
2025-11-03 20:16:08
Source Identifier
bbf0bd87-ece2-41be-b873-96928ee8fab9
KEV Date Added
-

Kategoriler

CWE-434 HIGH 2025

Referanslar

https://checkmk.com/werks?version=2.3.0p10 https://korelogic.com/Resources/Advisories/KL-001-2025-002.txt https://www.nagvis.org/downloads/changelog/1.9.42 http://seclists.org/fulldisclosure/2025/Feb/4 http://www.openwall.com/lists/oss-security/2025/02/04/4 https://lists.debian.org/debian-lts-announce/2025/05/msg00000.html https://korelogic.com/Resources/Advisories/KL-001-2025-002.txt