Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local permissions.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "2.1.0-NA"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b1"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b2"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b3"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b4"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b5"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b6"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b7"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b8"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-b9"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p1"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p10"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p2"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p3"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p4"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p5"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p6"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p7"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p8"
},
{
"introduced": "0"
},
{
"last_affected": "2.1.0-p9"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-NA"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b1"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b2"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b3"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b4"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b5"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b6"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b7"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-b8"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-i1"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p1"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p10"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p11"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p12"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p13"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p14"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p15"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p16"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p17"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p18"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p19"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p2"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p20"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p21"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p22"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p23"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p24"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p25"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p26"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p27"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p3"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p4"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p5"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p6"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p7"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p8"
},
{
"introduced": "0"
},
{
"last_affected": "2.0.0-p9"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-NA"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b1"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b10"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b11"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b12"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b2"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b3"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b4"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b5"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b6"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b7"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b8"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-b9"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p1"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p10"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p11"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p12"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p13"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p14"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p15"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p16"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p17"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p18"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p19"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p2"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p20"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p21"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p22"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p23"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p24"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p25"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p26"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p27"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p28"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p29"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p3"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p4"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p5"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p6"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p7"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p8"
},
{
"introduced": "0"
},
{
"last_affected": "1.6.0-p9"
}
]
}