CVE-2022-46303
- Source
- https://cve.org/CVERecord?id=CVE-2022-46303
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-46303.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-46303
- Downstream
- Published
- 2023-02-20T17:15:12.073Z
- Modified
- 2026-07-09T05:17:56.852311Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local permissions.
- References
Affected packages
Git / github.com/checkmk/checkmk
Affected ranges
- Type
- GIT
- Repo
- https://github.com/checkmk/checkmk
- Events
-
IntroducedLast affected
- Database specific
{ "cpe": [ "cpe:2.3:a:checkmk:checkmk:2.1.0:-:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:b1:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:p1:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:b2:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:p2:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:b3:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:p3:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:b4:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:p4:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:b5:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:p5:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:b6:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:p6:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:b7:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:p7:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:b8:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:p8:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:b9:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:p9:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.1.0:p10:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p2:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p3:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p4:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p5:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p6:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p7:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p8:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p10:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p11:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p12:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p13:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p14:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p15:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p16:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p17:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p18:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p19:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p20:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p21:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p22:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p23:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p24:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p25:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p26:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p27:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:2.0.0:p9:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:b1:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p1:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:b10:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p10:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:b11:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p11:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:b12:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p12:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:b2:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p2:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:b3:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p3:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:b4:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p4:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:b5:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p5:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:b6:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p6:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:b7:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p7:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:b8:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p8:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:b9:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p9:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p13:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p14:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p15:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p16:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p17:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p18:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p19:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p20:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p21:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p22:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p23:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p24:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p25:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p26:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p27:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p28:*:*:*:*:*:*", "cpe:2.3:a:checkmk:checkmk:1.6.0:p29:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "2.1.0-NA" }, { "last_affected": "2.1.0-NA" }, { "introduced": "2.1.0-b1" }, { "last_affected": "2.1.0-b1" }, { "introduced": "2.1.0-p1" }, { "last_affected": "2.1.0-p1" }, { "introduced": "2.1.0-b2" }, { "last_affected": "2.1.0-b2" }, { "introduced": "2.1.0-p2" }, { "last_affected": "2.1.0-p2" }, { "introduced": "2.1.0-b3" }, { "last_affected": "2.1.0-b3" }, { "introduced": "2.1.0-p3" }, { "last_affected": "2.1.0-p3" }, { "introduced": "2.1.0-b4" }, { "last_affected": "2.1.0-b4" }, { "introduced": "2.1.0-p4" }, { "last_affected": "2.1.0-p4" }, { "introduced": "2.1.0-b5" }, { "last_affected": "2.1.0-b5" }, { "introduced": "2.1.0-p5" }, { "last_affected": "2.1.0-p5" }, { "introduced": "2.1.0-b6" }, { "last_affected": "2.1.0-b6" }, { "introduced": "2.1.0-p6" }, { "last_affected": "2.1.0-p6" }, { "introduced": "2.1.0-b7" }, { "last_affected": "2.1.0-b7" }, { "introduced": "2.1.0-p7" }, { "last_affected": "2.1.0-p7" }, { "introduced": "2.1.0-b8" }, { "last_affected": "2.1.0-b8" }, { "introduced": "2.1.0-p8" }, { "last_affected": "2.1.0-p8" }, { "introduced": "2.1.0-b9" }, { "last_affected": "2.1.0-b9" }, { "introduced": "2.1.0-p9" }, { "last_affected": "2.1.0-p9" }, { "introduced": "2.1.0-p10" }, { "last_affected": "2.1.0-p10" }, { "introduced": "2.0.0-NA" }, { "last_affected": "2.0.0-NA" }, { "introduced": "2.0.0-b1" }, { "last_affected": "2.0.0-b1" }, { "introduced": "2.0.0-i1" }, { "last_affected": "2.0.0-i1" }, { "introduced": "2.0.0-p1" }, { "last_affected": "2.0.0-p1" }, { "introduced": "2.0.0-b2" }, { "last_affected": "2.0.0-b2" }, { "introduced": "2.0.0-p2" }, { "last_affected": "2.0.0-p2" }, { "introduced": "2.0.0-b3" }, { "last_affected": "2.0.0-b3" }, { "introduced": "2.0.0-p3" }, { "last_affected": "2.0.0-p3" }, { "introduced": "2.0.0-b4" }, { "last_affected": "2.0.0-b4" }, { "introduced": "2.0.0-p4" }, { "last_affected": "2.0.0-p4" }, { "introduced": "2.0.0-b5" }, { "last_affected": "2.0.0-b5" }, { "introduced": "2.0.0-p5" }, { "last_affected": "2.0.0-p5" }, { "introduced": "2.0.0-b6" }, { "last_affected": "2.0.0-b6" }, { "introduced": "2.0.0-p6" }, { "last_affected": "2.0.0-p6" }, { "introduced": "2.0.0-b7" }, { "last_affected": "2.0.0-b7" }, { "introduced": "2.0.0-p7" }, { "last_affected": "2.0.0-p7" }, { "introduced": "2.0.0-b8" }, { "last_affected": "2.0.0-b8" }, { "introduced": "2.0.0-p8" }, { "last_affected": "2.0.0-p8" }, { "introduced": "2.0.0-p10" }, { "last_affected": "2.0.0-p10" }, { "introduced": "2.0.0-p11" }, { "last_affected": "2.0.0-p11" }, { "introduced": "2.0.0-p12" }, { "last_affected": "2.0.0-p12" }, { "introduced": "2.0.0-p13" }, { "last_affected": "2.0.0-p13" }, { "introduced": "2.0.0-p14" }, { "last_affected": "2.0.0-p14" }, { "introduced": "2.0.0-p15" }, { "last_affected": "2.0.0-p15" }, { "introduced": "2.0.0-p16" }, { "last_affected": "2.0.0-p16" }, { "introduced": "2.0.0-p17" }, { "last_affected": "2.0.0-p17" }, { "introduced": "2.0.0-p18" }, { "last_affected": "2.0.0-p18" }, { "introduced": "2.0.0-p19" }, { "last_affected": "2.0.0-p19" }, { "introduced": "2.0.0-p20" }, { "last_affected": "2.0.0-p20" }, { "introduced": "2.0.0-p21" }, { "last_affected": "2.0.0-p21" }, { "introduced": "2.0.0-p22" }, { "last_affected": "2.0.0-p22" }, { "introduced": "2.0.0-p23" }, { "last_affected": "2.0.0-p23" }, { "introduced": "2.0.0-p24" }, { "last_affected": "2.0.0-p24" }, { "introduced": "2.0.0-p25" }, { "last_affected": "2.0.0-p25" }, { "introduced": "2.0.0-p26" }, { "last_affected": "2.0.0-p26" }, { "introduced": "2.0.0-p27" }, { "last_affected": "2.0.0-p27" }, { "introduced": "2.0.0-p9" }, { "last_affected": "2.0.0-p9" }, { "introduced": "1.6.0-NA" }, { "last_affected": "1.6.0-NA" }, { "introduced": "1.6.0-b1" }, { "last_affected": "1.6.0-b1" }, { "introduced": "1.6.0-p1" }, { "last_affected": "1.6.0-p1" }, { "introduced": "1.6.0-b10" }, { "last_affected": "1.6.0-b10" }, { "introduced": "1.6.0-p10" }, { "last_affected": "1.6.0-p10" }, { "introduced": "1.6.0-b11" }, { "last_affected": "1.6.0-b11" }, { "introduced": "1.6.0-p11" }, { "last_affected": "1.6.0-p11" }, { "introduced": "1.6.0-b12" }, { "last_affected": "1.6.0-b12" }, { "introduced": "1.6.0-p12" }, { "last_affected": "1.6.0-p12" }, { "introduced": "1.6.0-b2" }, { "last_affected": "1.6.0-b2" }, { "introduced": "1.6.0-p2" }, { "last_affected": "1.6.0-p2" }, { "introduced": "1.6.0-b3" }, { "last_affected": "1.6.0-b3" }, { "introduced": "1.6.0-p3" }, { "last_affected": "1.6.0-p3" }, { "introduced": "1.6.0-b4" }, { "last_affected": "1.6.0-b4" }, { "introduced": "1.6.0-p4" }, { "last_affected": "1.6.0-p4" }, { "introduced": "1.6.0-b5" }, { "last_affected": "1.6.0-b5" }, { "introduced": "1.6.0-p5" }, { "last_affected": "1.6.0-p5" }, { "introduced": "1.6.0-b6" }, { "last_affected": "1.6.0-b6" }, { "introduced": "1.6.0-p6" }, { "last_affected": "1.6.0-p6" }, { "introduced": "1.6.0-b7" }, { "last_affected": "1.6.0-b7" }, { "introduced": "1.6.0-p7" }, { "last_affected": "1.6.0-p7" }, { "introduced": "1.6.0-b8" }, { "last_affected": "1.6.0-b8" }, { "introduced": "1.6.0-p8" }, { "last_affected": "1.6.0-p8" }, { "introduced": "1.6.0-b9" }, { "last_affected": "1.6.0-b9" }, { "introduced": "1.6.0-p9" }, { "last_affected": "1.6.0-p9" }, { "introduced": "1.6.0-p13" }, { "last_affected": "1.6.0-p13" }, { "introduced": "1.6.0-p14" }, { "last_affected": "1.6.0-p14" }, { "introduced": "1.6.0-p15" }, { "last_affected": "1.6.0-p15" }, { "introduced": "1.6.0-p16" }, { "last_affected": "1.6.0-p16" }, { "introduced": "1.6.0-p17" }, { "last_affected": "1.6.0-p17" }, { "introduced": "1.6.0-p18" }, { "last_affected": "1.6.0-p18" }, { "introduced": "1.6.0-p19" }, { "last_affected": "1.6.0-p19" }, { "introduced": "1.6.0-p20" }, { "last_affected": "1.6.0-p20" }, { "introduced": "1.6.0-p21" }, { "last_affected": "1.6.0-p21" }, { "introduced": "1.6.0-p22" }, { "last_affected": "1.6.0-p22" }, { "introduced": "1.6.0-p23" }, { "last_affected": "1.6.0-p23" }, { "introduced": "1.6.0-p24" }, { "last_affected": "1.6.0-p24" }, { "introduced": "1.6.0-p25" }, { "last_affected": "1.6.0-p25" }, { "introduced": "1.6.0-p26" }, { "last_affected": "1.6.0-p26" }, { "introduced": "1.6.0-p27" }, { "last_affected": "1.6.0-p27" }, { "introduced": "1.6.0-p28" }, { "last_affected": "1.6.0-p28" }, { "introduced": "1.6.0-p29" }, { "last_affected": "1.6.0-p29" } ], "source": "CPE_STRING" }
Affected versions
1.*
1.6.0-NA
1.6.0-b1
1.6.0-b10
1.6.0-b11
1.6.0-b12
1.6.0-b2
1.6.0-b3
1.6.0-b4
1.6.0-b5
1.6.0-b6
1.6.0-b7
1.6.0-b8
1.6.0-b9
1.6.0-p13
1.6.0-p14
1.6.0-p15
1.6.0-p16
1.6.0-p17
1.6.0-p18
1.6.0-p19
1.6.0-p20
1.6.0-p21
1.6.0-p22
1.6.0-p23
1.6.0-p24
1.6.0-p25
1.6.0-p26
1.6.0-p27
1.6.0-p28
1.6.0-p29
2.*
2.0.0-NA
2.0.0-b1
2.0.0-b2
2.0.0-b3
2.0.0-b4
2.0.0-b5
2.0.0-b6
2.0.0-b7
2.0.0-b8
2.0.0-p10
2.0.0-p11
2.0.0-p12
2.0.0-p13
2.0.0-p14
2.0.0-p15
2.0.0-p16
2.0.0-p17
2.0.0-p18
2.0.0-p19
2.0.0-p20
2.0.0-p21
2.0.0-p22
2.0.0-p23
2.0.0-p24
2.0.0-p25
2.0.0-p26
2.0.0-p27
2.0.0-p9
2.1.0-NA
2.1.0-b1
2.1.0-b2
2.1.0-b3
2.1.0-b4
2.1.0-b5
2.1.0-b6
2.1.0-b7
2.1.0-b8
2.1.0-b9
2.1.0-p10