CVE-2014-2330: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in the Multisite GUI in CheckMK before 1.2.5i2 allow remote attackers to hijack the authentication of users for requests that (1) upload arbitrary snapshots, (2) delete arbitrary files, or possibly have other unspecified impact via unknown vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2330?
The severity of CVE-2014-2330 is classified as high due to the potential for unauthorized actions on behalf of authenticated users.
How do I fix CVE-2014-2330?
To fix CVE-2014-2330, upgrade Check_MK to a version after 1.2.5i2 to eliminate the vulnerabilities.
What types of attacks does CVE-2014-2330 allow?
CVE-2014-2330 allows remote attackers to perform actions such as uploading arbitrary snapshots or deleting arbitrary files via cross-site request forgery.
Which versions of Check_MK are affected by CVE-2014-2330?
Check_MK versions before 1.2.5i2, specifically versions 1.2.2 and 1.2.3, are affected by CVE-2014-2330.
What is CSRF in the context of CVE-2014-2330?
CSRF, or cross-site request forgery, in the context of CVE-2014-2330 refers to the ability of an attacker to trick authenticated users into executing unwanted actions on a web application.