CVE-2022-46836

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-46836
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-46836.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-46836
Downstream
Published
2023-02-20T17:15:12.153Z
Modified
2025-11-20T12:16:13.266467Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

PHP code injection in watolib auth.php and hosttags.php in Tribe29's Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker to inject and execute PHP code which will be executed upon request of the vulnerable component.

References

Affected packages

Git / github.com/checkmk/checkmk

Affected ranges

Type
GIT
Repo
https://github.com/checkmk/checkmk
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
04813a13c6522da99028a99cb99505757808497b
Last affected
04c27ac750cc5a20ed931e7d920cb007897b7d3c
Last affected
05421bd94ec8a516571e05a9366613aa7859e46a
Last affected
09e5653019eab4ea45c307f4385e964d4ae4c1e3
Last affected
0d2daebde992a5d7a1246c68b92f6c43a53e4551
Last affected
0e046c3b22294ef5ec66b8372ece87becf7d3430
Last affected
1072c2466449c89ab730e2d8edd9b0115f2866fe
Last affected
1cdf81994d9ed01d345a283ce87b7d57c88d358d
Last affected
23c0d61b54a817b4c0a1a23f301b4e1c2833a7b1
Last affected
24fb378d9e2a8d40488264f1a3eb24a0f41f63c5
Last affected
266fe3ecbb7c900b65430528955f01d1462dfdd6
Last affected
2851c0500dd714163a8203e58d371771da1191a4
Last affected
2a2ec677a31f9cfa5c00692b64654031c3da2a08
Last affected
2b920acb7fcd43e4a9c7fc07cd3456c7abea7939
Last affected
2c7990e82af4fff30379472838eb5b9ef0ebfa7a
Last affected
3097f9c57877fe7651d8c2a46e648a28cf920ed6
Last affected
30b2599d7a503a4993b801cb233784d545e2ed9a
Last affected
314add736614b9b4a9100ae2294b75a72b01c6aa
Last affected
370fedb12335d97dfdec344e4b15bbb489c72b20
Last affected
3a98f74ec242670d49ac7fec02d99fe98473500a
Last affected
3e6d79677aeebabb6ba079026a06736b5ce6ece1
Last affected
3f0322b982e010560f32828931d7d7817881706e
Last affected
484ded389cf62414abc10f16894abed01da8e4d2
Last affected
515532647e2ed9711109eda47bba60ab9ef44d77
Last affected
516811eef93eaf64b271a824d36503197fc53679
Last affected
53649df3184e97b930e8d1dbf7a248e6cb28c21c
Last affected
5f21e6a9fa9986548ee691c60b6e17fbb274f790
Last affected
604cfaf085d561ecef8e0326187d66bb63b97714
Last affected
62baa2031dbc7dfc55f4700f98773bc5cf544f48
Last affected
684d45dd10dc01d4c8832a57143e01f99648935c
Last affected
6a686961c4b760c55a13cfdb61e7c02be832a0be
Last affected
6be56d203d0ce0e229a3ba2dd3c4ad50c9f85d07
Last affected
6c8700b14ba358e91632103a4270b7c49a54e2b8
Last affected
6e04fbc04d3ce031ee3b91dc51fe61df1215ab22
Last affected
6eb3b5bc4955858e31cdfb55d54dd73596fda235
Last affected
715a3481d11141310265e2144e29271bfb4e6ef2
Last affected
732c7bf20e0494dab8adf1bcd33050c12152953a
Last affected
7ce1924cca467dbddd1a98aaf537e78b5505e477
Last affected
81ef39b47302619a5b4ff268a9cd0576b75e7bcb
Last affected
83c4e71db331cd43fb0769a52ceb2b5a0188a31b
Last affected
8b5aced3bb5522033e47d88084ca781a8564a988
Last affected
8c4e64ce3431d4a91f0ba7deae056041453a2be1
Last affected
8c60c2922866c21bc86d05f16af4852e18164297
Last affected
95921f1e4125336395d0bc85434f91c0a0f8f571
Last affected
966a84e7fae45f25cc63150a256dc4df3907c9b0
Last affected
9a6a31d750f2ce84318fb060edc2ce773e6ff40f
Last affected
9b7289dd5ced8f05ec16651360c1b2db06a9b3a2
Last affected
9d5d264e9fcd0da62d13dbf6decbf7b84ccd86f9
Last affected
a08e390df0ae711bbee6fbdd0d32da1452918ae3
Last affected
a14be1ca839f3b602c37c1f66ff091a3f4ac5c9a
Last affected
a21f44d5ed8ad8c40784e6c68faf597d7e45a949
Last affected
a7d32fe2d297d968ee6230e1f2ee53dedc6ae563
Last affected
a7e983abbae3f5e5e76597fcf514f27496c6b8af
Last affected
a95de6e2902e809b0fe81105b56977603d9fb240
Last affected
b23e1322930e36d532c7a4d339221681debad59b
Last affected
ba29b0f10d16be2f8513ecd6566f53d508f9fe02
Last affected
ba82d899bc7ff832379c44b0fac0ef8335ecc2bc
Last affected
bef7153bb05de7a9335a5534edf4d49484c26b98
Last affected
c2173ab296c8df943f2b899d2b9beb6a00bab5bd
Last affected
cf11a87326ca17bc321064280763dede1febda7f
Last affected
d212d3a2692868ea916c37841afa65f4fa07d998
Last affected
d5ccd5ecc956e665aca80f3c486f7fa46f409424
Last affected
d662d3c2ed0d9784427bae8300941b732ff5d81b
Last affected
df41d340f4846d8c56fc59dc66aa75eea1982267
Last affected
e04f338e4054b32db1de80f3e6cc75c2d65f2df5
Last affected
e323962c9081894ea40c7e0880a5de578fe2d2bf
Last affected
f4b77018749689779d96b5ae77966cbda916dc52
Last affected
f5ed2d23cb6be98262cc21c464bef35a42c8442a
Last affected
fc1eb156035f9941aae400258ef96e77b9c2bef9

Affected versions

1.*

1.1.0beta17

v1.*

v1.1.0
v1.1.10
v1.1.10b1
v1.1.10b2
v1.1.11i1
v1.1.11i2
v1.1.11i3
v1.1.11i4
v1.1.12
v1.1.12b1
v1.1.12b2
v1.1.13i1
v1.1.13i2
v1.1.13i3
v1.1.2
v1.1.3
v1.1.3b1
v1.1.4
v1.1.5i0
v1.1.5i1
v1.1.5i2
v1.1.5i3
v1.1.6
v1.1.6b2
v1.1.6b3
v1.1.7i1
v1.1.7i2
v1.1.7i3
v1.1.7i4
v1.1.7i5
v1.1.8
v1.1.8b1
v1.1.8b2
v1.1.8b3
v1.1.9i1
v1.1.9i2
v1.1.9i3
v1.1.9i4
v1.1.9i5
v1.1.9i6
v1.1.9i7
v1.1.9i8
v1.1.9i9
v1.2.0b1
v1.2.0b2
v1.2.0b3
v1.2.0b4
v1.2.0b5
v1.2.0b6
v1.2.0p1
v1.2.0p2
v1.2.0p3
v1.2.1i1
v1.2.1i2
v1.2.1i3
v1.2.1i4
v1.2.1i5
v1.2.2b1
v1.2.3i1
v1.2.3i2
v1.2.3i3
v1.2.3i4
v1.2.3i5
v1.2.3i6
v1.2.3i7
v1.2.5i1
v1.2.5i2
v1.2.5i3
v1.2.5i4
v1.2.5i5
v1.2.5i6
v1.2.7i1
v1.2.7i2
v1.2.7i3
v1.4.0i1
v1.4.0i2
v1.4.0i3
v1.5.0i1
v1.5.0i2
v1.5.0i3
v1.6.0
v1.6.0b1
v1.6.0b10
v1.6.0b11
v1.6.0b2
v1.6.0b3
v1.6.0b4
v1.6.0b5
v1.6.0b6
v1.6.0b7
v1.6.0b8
v1.6.0b9
v1.6.0p1

v2.*

v2.0.0
v2.0.0b1
v2.0.0b2
v2.0.0b3
v2.0.0b4
v2.0.0b5
v2.0.0b6
v2.0.0b7
v2.0.0i1
v2.0.0p1
v2.0.0p10
v2.0.0p11
v2.0.0p12
v2.0.0p13
v2.0.0p14
v2.0.0p15
v2.0.0p16
v2.0.0p17
v2.0.0p18
v2.0.0p19
v2.0.0p20
v2.0.0p21
v2.0.0p22
v2.0.0p23
v2.0.0p24
v2.0.0p25
v2.0.0p3
v2.0.0p4
v2.0.0p5
v2.0.0p6
v2.0.0p7
v2.0.0p8
v2.0.0p9
v2.1.0
v2.1.0b1
v2.1.0b2
v2.1.0b3
v2.1.0b4
v2.1.0b5
v2.1.0b6
v2.1.0b7
v2.1.0b8
v2.1.0b9
v2.1.0p1
v2.1.0p2
v2.1.0p3
v2.1.0p4
v2.1.0p5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-46836.json"