The version of Check_MK running on the remote web server is 1.2.4 prior to 1.2.4p4 or 1.2.5 prior to 1.2.5i4. It is, therefore, affected by multiple vulnerabilities :

  - Multiple cross-site script (XSS) vulnerabilities exist     in the multisite component, specifically within the     render_status_icons() function in file htmllib.py and     the ajax_action() function in file actions.py, due to     improper validation of user-supplied input before     returning it to users. An unauthenticated, remote     attacker can exploit these, via a specially crafted     request, to execute arbitrary script code in a user's     browser session. (CVE-2014-5338)

  - A flaw exists related to row selections that allows an     authenticated, remote attacker to write Check_MK     configuration (.mk) files to arbitrary locations.
    (CVE-2014-5339)

  - A flaw exists in the wato component due to using the     insecure Python pickel API calls. An unauthenticated,     remote attacker can exploit this, via a specially     crafted serialized object, to execute arbitrary code.
    (CVE-2014-5340)

New upstream release that provides multiple security files.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Do not require any other shell than bash since that's the default shell for the Fedora / RHEL distributions New upstream release providing many security fixes. New upstream release providing many security fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New upstream release providing many security fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
101087	Check_MK 1.2.4 < 1.2.4p4 / 1.2.5 < 1.2.5i4 Multiple Vulnerabilities	Nessus	CGI abuses	6/28/2017	11/28/2018	high
77932	Fedora 21 : check-mk-1.2.4p5-1.fc21 (2014-11160)	Nessus	Fedora Local Security Checks	9/29/2014	1/11/2021	high
78056	Fedora 21 : check-mk-1.2.4p5-2.fc21 (2014-11896)	Nessus	Fedora Local Security Checks	10/6/2014	1/11/2021	high
78247	Fedora 20 : check-mk-1.2.4p5-2.fc20 (2014-11895)	Nessus	Fedora Local Security Checks	10/11/2014	1/11/2021	high
77930	Fedora 19 : check-mk-1.2.4p5-1.fc19 (2014-11082)	Nessus	Fedora Local Security Checks	9/29/2014	1/11/2021	high
77926	Fedora 20 : check-mk-1.2.4p5-1.fc20 (2014-10972)	Nessus	Fedora Local Security Checks	9/29/2014	1/11/2021	high
78249	Fedora 19 : check-mk-1.2.4p5-2.fc19 (2014-11929)	Nessus	Fedora Local Security Checks	10/11/2014	1/11/2021	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high