CVE-2014-5339: Medium severity checkmk vulnerability
Published Sep 2, 2014
·Updated
CheckMK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to write checkmk config files (.mk files) to arbitrary locations via vectors related to row selections.
Affected Software
7 affected components
Check Mk Project Check Mk<=1.2.4
Check Mk Project Check Mk=1.2.4
Check Mk Project Check Mk=1.2.4-p1
Check Mk Project Check Mk=1.2.4-p2
Check Mk Project Check Mk=1.2.5-i1
Check Mk Project Check Mk=1.2.5-i2
Check Mk Project Check Mk=1.2.5-i3
Remediation
Patch Available
Event History
Sep 2, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-5339?
CVE-2014-5339 is rated as a high severity vulnerability that allows remote authenticated users to write configuration files to arbitrary locations.
2
How do I fix CVE-2014-5339?
To fix CVE-2014-5339, upgrade Check_MK to version 1.2.4p4 or 1.2.5i4 or later.
3
Who is affected by CVE-2014-5339?
CVE-2014-5339 affects Check_MK versions before 1.2.4p4 and 1.2.5 before 1.2.5i4.
4
What are the potential impacts of CVE-2014-5339?
The potential impacts of CVE-2014-5339 include unauthorized access to sensitive configurations and potential system compromise.
5
Is CVE-2014-5339 an authenticated vulnerability?
Yes, CVE-2014-5339 is an authenticated vulnerability, meaning an attacker must have valid credentials to exploit it.