What is the severity of CVE-2022-46836?

CVE-2022-46836 is considered a critical vulnerability due to its potential for remote code execution via PHP code injection.

How do I fix CVE-2022-46836?

To fix CVE-2022-46836, upgrade your Checkmk installation to a version later than 2.1.0p10, 2.0.0p27, or 1.6.0p29.

What versions are affected by CVE-2022-46836?

CVE-2022-46836 affects Checkmk versions 2.1.0 up to and including 2.1.0p10, 2.0.0 up to and including 2.0.0p27, and 1.6.0 up to and including 1.6.0p29.

What are the potential impacts of CVE-2022-46836?

Exploitation of CVE-2022-46836 allows attackers to inject and execute arbitrary PHP code, potentially leading to full system compromise.

Is there a known exploit for CVE-2022-46836?

Yes, there are reports indicating that CVE-2022-46836 has been actively exploited in the wild.

Vulnerability/
CVE-2022-46836

critical

9.1

CWE

20 94

20/2/2023

3/8/2024

CVE-2022-46836: PHP code injection in watolib

First published: Mon Feb 20 2023(Updated: )

PHP code injection in watolib auth.php and hosttags.php in Tribe29's Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker to inject and execute PHP code which will be executed upon request of the vulnerable component.

Credit: security@checkmk.com

Affected Software	Affected Version	How to fix
Checkmk NagVis	=2.1.0
Checkmk NagVis	=2.1.0-b1
Checkmk NagVis	=2.1.0-b2
Checkmk NagVis	=2.1.0-b3
Checkmk NagVis	=2.1.0-b4
Checkmk NagVis	=2.1.0-b5
Checkmk NagVis	=2.1.0-b6
Checkmk NagVis	=2.1.0-b7
Checkmk NagVis	=2.1.0-b8
Checkmk NagVis	=2.1.0-b9
Checkmk NagVis	=2.1.0-p1
Checkmk NagVis	=2.1.0-p10
Checkmk NagVis	=2.1.0-p2
Checkmk NagVis	=2.1.0-p3
Checkmk NagVis	=2.1.0-p4
Checkmk NagVis	=2.1.0-p5
Checkmk NagVis	=2.1.0-p6
Checkmk NagVis	=2.1.0-p7
Checkmk NagVis	=2.1.0-p8
Checkmk NagVis	=2.1.0-p9
Checkmk NagVis	=2.0.0
Checkmk NagVis	=2.0.0-b1
Checkmk NagVis	=2.0.0-b2
Checkmk NagVis	=2.0.0-b3
Checkmk NagVis	=2.0.0-b4
Checkmk NagVis	=2.0.0-b5
Checkmk NagVis	=2.0.0-b6
Checkmk NagVis	=2.0.0-b7
Checkmk NagVis	=2.0.0-b8
Checkmk NagVis	=2.0.0-i1
Checkmk NagVis	=2.0.0-p1
Checkmk NagVis	=2.0.0-p10
Checkmk NagVis	=2.0.0-p11
Checkmk NagVis	=2.0.0-p12
Checkmk NagVis	=2.0.0-p13
Checkmk NagVis	=2.0.0-p14
Checkmk NagVis	=2.0.0-p15
Checkmk NagVis	=2.0.0-p16
Checkmk NagVis	=2.0.0-p17
Checkmk NagVis	=2.0.0-p18
Checkmk NagVis	=2.0.0-p19
Checkmk NagVis	=2.0.0-p2
Checkmk NagVis	=2.0.0-p20
Checkmk NagVis	=2.0.0-p21
Checkmk NagVis	=2.0.0-p22
Checkmk NagVis	=2.0.0-p23
Checkmk NagVis	=2.0.0-p24
Checkmk NagVis	=2.0.0-p25
Checkmk NagVis	=2.0.0-p26
Checkmk NagVis	=2.0.0-p27
Checkmk NagVis	=2.0.0-p3
Checkmk NagVis	=2.0.0-p4
Checkmk NagVis	=2.0.0-p5
Checkmk NagVis	=2.0.0-p6
Checkmk NagVis	=2.0.0-p7
Checkmk NagVis	=2.0.0-p8
Checkmk NagVis	=2.0.0-p9
Checkmk NagVis	=1.6.0
Checkmk NagVis	=1.6.0-b1
Checkmk NagVis	=1.6.0-b10
Checkmk NagVis	=1.6.0-b11
Checkmk NagVis	=1.6.0-b12
Checkmk NagVis	=1.6.0-b2
Checkmk NagVis	=1.6.0-b3
Checkmk NagVis	=1.6.0-b4
Checkmk NagVis	=1.6.0-b5
Checkmk NagVis	=1.6.0-b6
Checkmk NagVis	=1.6.0-b7
Checkmk NagVis	=1.6.0-b8
Checkmk NagVis	=1.6.0-b9
Checkmk NagVis	=1.6.0-p1
Checkmk NagVis	=1.6.0-p10
Checkmk NagVis	=1.6.0-p11
Checkmk NagVis	=1.6.0-p12
Checkmk NagVis	=1.6.0-p13
Checkmk NagVis	=1.6.0-p14
Checkmk NagVis	=1.6.0-p15
Checkmk NagVis	=1.6.0-p16
Checkmk NagVis	=1.6.0-p17
Checkmk NagVis	=1.6.0-p18
Checkmk NagVis	=1.6.0-p19
Checkmk NagVis	=1.6.0-p2
Checkmk NagVis	=1.6.0-p20
Checkmk NagVis	=1.6.0-p21
Checkmk NagVis	=1.6.0-p22
Checkmk NagVis	=1.6.0-p23
Checkmk NagVis	=1.6.0-p24
Checkmk NagVis	=1.6.0-p25
Checkmk NagVis	=1.6.0-p26
Checkmk NagVis	=1.6.0-p27
Checkmk NagVis	=1.6.0-p28
Checkmk NagVis	=1.6.0-p29
Checkmk NagVis	=1.6.0-p3
Checkmk NagVis	=1.6.0-p4
Checkmk NagVis	=1.6.0-p5
Checkmk NagVis	=1.6.0-p6
Checkmk NagVis	=1.6.0-p7
Checkmk NagVis	=1.6.0-p8
Checkmk NagVis	=1.6.0-p9
Checkmk NagVis	=2.1.0
Checkmk NagVis	=2.1.0-b1
Checkmk NagVis	=2.1.0-b2
Checkmk NagVis	=2.1.0-b3
Checkmk NagVis	=2.1.0-b4
Checkmk NagVis	=2.1.0-b5
Checkmk NagVis	=2.1.0-b6
Checkmk NagVis	=2.1.0-b7
Checkmk NagVis	=2.1.0-b8
Checkmk NagVis	=2.1.0-b9
Checkmk NagVis	=2.1.0-p1
Checkmk NagVis	=2.1.0-p10
Checkmk NagVis	=2.1.0-p2
Checkmk NagVis	=2.1.0-p3
Checkmk NagVis	=2.1.0-p4
Checkmk NagVis	=2.1.0-p5
Checkmk NagVis	=2.1.0-p6
Checkmk NagVis	=2.1.0-p7
Checkmk NagVis	=2.1.0-p8
Checkmk NagVis	=2.1.0-p9
Checkmk NagVis	=2.0.0
Checkmk NagVis	=2.0.0-b1
Checkmk NagVis	=2.0.0-b2
Checkmk NagVis	=2.0.0-b3
Checkmk NagVis	=2.0.0-b4
Checkmk NagVis	=2.0.0-b5
Checkmk NagVis	=2.0.0-b6
Checkmk NagVis	=2.0.0-b7
Checkmk NagVis	=2.0.0-b8
Checkmk NagVis	=2.0.0-i1
Checkmk NagVis	=2.0.0-p1
Checkmk NagVis	=2.0.0-p10
Checkmk NagVis	=2.0.0-p11
Checkmk NagVis	=2.0.0-p12
Checkmk NagVis	=2.0.0-p13
Checkmk NagVis	=2.0.0-p14
Checkmk NagVis	=2.0.0-p15
Checkmk NagVis	=2.0.0-p16
Checkmk NagVis	=2.0.0-p17
Checkmk NagVis	=2.0.0-p18
Checkmk NagVis	=2.0.0-p19
Checkmk NagVis	=2.0.0-p2
Checkmk NagVis	=2.0.0-p20
Checkmk NagVis	=2.0.0-p21
Checkmk NagVis	=2.0.0-p22
Checkmk NagVis	=2.0.0-p23
Checkmk NagVis	=2.0.0-p24
Checkmk NagVis	=2.0.0-p25
Checkmk NagVis	=2.0.0-p26
Checkmk NagVis	=2.0.0-p27
Checkmk NagVis	=2.0.0-p3
Checkmk NagVis	=2.0.0-p4
Checkmk NagVis	=2.0.0-p5
Checkmk NagVis	=2.0.0-p6
Checkmk NagVis	=2.0.0-p7
Checkmk NagVis	=2.0.0-p8
Checkmk NagVis	=2.0.0-p9
Checkmk NagVis	=1.6.0
Checkmk NagVis	=1.6.0-b1
Checkmk NagVis	=1.6.0-b10
Checkmk NagVis	=1.6.0-b11
Checkmk NagVis	=1.6.0-b12
Checkmk NagVis	=1.6.0-b2
Checkmk NagVis	=1.6.0-b3
Checkmk NagVis	=1.6.0-b4
Checkmk NagVis	=1.6.0-b5
Checkmk NagVis	=1.6.0-b6
Checkmk NagVis	=1.6.0-b7
Checkmk NagVis	=1.6.0-b8
Checkmk NagVis	=1.6.0-b9
Checkmk NagVis	=1.6.0-p1
Checkmk NagVis	=1.6.0-p10
Checkmk NagVis	=1.6.0-p11
Checkmk NagVis	=1.6.0-p12
Checkmk NagVis	=1.6.0-p13
Checkmk NagVis	=1.6.0-p14
Checkmk NagVis	=1.6.0-p15
Checkmk NagVis	=1.6.0-p16
Checkmk NagVis	=1.6.0-p17
Checkmk NagVis	=1.6.0-p18
Checkmk NagVis	=1.6.0-p19
Checkmk NagVis	=1.6.0-p2
Checkmk NagVis	=1.6.0-p20
Checkmk NagVis	=1.6.0-p21
Checkmk NagVis	=1.6.0-p22
Checkmk NagVis	=1.6.0-p23
Checkmk NagVis	=1.6.0-p24
Checkmk NagVis	=1.6.0-p25
Checkmk NagVis	=1.6.0-p26
Checkmk NagVis	=1.6.0-p27
Checkmk NagVis	=1.6.0-p28
Checkmk NagVis	=1.6.0-p29
Checkmk NagVis	=1.6.0-p3
Checkmk NagVis	=1.6.0-p4
Checkmk NagVis	=1.6.0-p5
Checkmk NagVis	=1.6.0-p6
Checkmk NagVis	=1.6.0-p7
Checkmk NagVis	=1.6.0-p8
Checkmk NagVis	=1.6.0-p9

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2022-46836?
CVE-2022-46836 is considered a critical vulnerability due to its potential for remote code execution via PHP code injection.
How do I fix CVE-2022-46836?
To fix CVE-2022-46836, upgrade your Checkmk installation to a version later than 2.1.0p10, 2.0.0p27, or 1.6.0p29.
What versions are affected by CVE-2022-46836?
CVE-2022-46836 affects Checkmk versions 2.1.0 up to and including 2.1.0p10, 2.0.0 up to and including 2.0.0p27, and 1.6.0 up to and including 1.6.0p29.
What are the potential impacts of CVE-2022-46836?
Exploitation of CVE-2022-46836 allows attackers to inject and execute arbitrary PHP code, potentially leading to full system compromise.
Is there a known exploit for CVE-2022-46836?
Yes, there are reports indicating that CVE-2022-46836 has been actively exploited in the wild.

agent/references
agent/weakness
agent/author
agent/type
agent/description
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/title
agent/severity
agent/first-publish-date
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-api
source/NVD
agent/software-canonical-lookup
vendor/tribe29
canonical/checkmk nagvis
version/checkmk nagvis/2.1.0
version/checkmk nagvis/2.1.0-b1
version/checkmk nagvis/2.1.0-b2
version/checkmk nagvis/2.1.0-b3
version/checkmk nagvis/2.1.0-b4
version/checkmk nagvis/2.1.0-b5
version/checkmk nagvis/2.1.0-b6
version/checkmk nagvis/2.1.0-b7
version/checkmk nagvis/2.1.0-b8
version/checkmk nagvis/2.1.0-b9
version/checkmk nagvis/2.1.0-p1
version/checkmk nagvis/2.1.0-p10
version/checkmk nagvis/2.1.0-p2
version/checkmk nagvis/2.1.0-p3
version/checkmk nagvis/2.1.0-p4
version/checkmk nagvis/2.1.0-p5
version/checkmk nagvis/2.1.0-p6
version/checkmk nagvis/2.1.0-p7
version/checkmk nagvis/2.1.0-p8
version/checkmk nagvis/2.1.0-p9
version/checkmk nagvis/2.0.0
version/checkmk nagvis/2.0.0-b1
version/checkmk nagvis/2.0.0-b2
version/checkmk nagvis/2.0.0-b3
version/checkmk nagvis/2.0.0-b4
version/checkmk nagvis/2.0.0-b5
version/checkmk nagvis/2.0.0-b6
version/checkmk nagvis/2.0.0-b7
version/checkmk nagvis/2.0.0-b8
version/checkmk nagvis/2.0.0-i1
version/checkmk nagvis/2.0.0-p1
version/checkmk nagvis/2.0.0-p10
version/checkmk nagvis/2.0.0-p11
version/checkmk nagvis/2.0.0-p12
version/checkmk nagvis/2.0.0-p13
version/checkmk nagvis/2.0.0-p14
version/checkmk nagvis/2.0.0-p15
version/checkmk nagvis/2.0.0-p16
version/checkmk nagvis/2.0.0-p17
version/checkmk nagvis/2.0.0-p18
version/checkmk nagvis/2.0.0-p19
version/checkmk nagvis/2.0.0-p2
version/checkmk nagvis/2.0.0-p20
version/checkmk nagvis/2.0.0-p21
version/checkmk nagvis/2.0.0-p22
version/checkmk nagvis/2.0.0-p23
version/checkmk nagvis/2.0.0-p24
version/checkmk nagvis/2.0.0-p25
version/checkmk nagvis/2.0.0-p26
version/checkmk nagvis/2.0.0-p27
version/checkmk nagvis/2.0.0-p3
version/checkmk nagvis/2.0.0-p4
version/checkmk nagvis/2.0.0-p5
version/checkmk nagvis/2.0.0-p6
version/checkmk nagvis/2.0.0-p7
version/checkmk nagvis/2.0.0-p8
version/checkmk nagvis/2.0.0-p9
version/checkmk nagvis/1.6.0
version/checkmk nagvis/1.6.0-b1
version/checkmk nagvis/1.6.0-b10
version/checkmk nagvis/1.6.0-b11
version/checkmk nagvis/1.6.0-b12
version/checkmk nagvis/1.6.0-b2
version/checkmk nagvis/1.6.0-b3
version/checkmk nagvis/1.6.0-b4
version/checkmk nagvis/1.6.0-b5
version/checkmk nagvis/1.6.0-b6
version/checkmk nagvis/1.6.0-b7
version/checkmk nagvis/1.6.0-b8
version/checkmk nagvis/1.6.0-b9
version/checkmk nagvis/1.6.0-p1
version/checkmk nagvis/1.6.0-p10
version/checkmk nagvis/1.6.0-p11
version/checkmk nagvis/1.6.0-p12
version/checkmk nagvis/1.6.0-p13
version/checkmk nagvis/1.6.0-p14
version/checkmk nagvis/1.6.0-p15
version/checkmk nagvis/1.6.0-p16
version/checkmk nagvis/1.6.0-p17
version/checkmk nagvis/1.6.0-p18
version/checkmk nagvis/1.6.0-p19
version/checkmk nagvis/1.6.0-p2
version/checkmk nagvis/1.6.0-p20
version/checkmk nagvis/1.6.0-p21
version/checkmk nagvis/1.6.0-p22
version/checkmk nagvis/1.6.0-p23
version/checkmk nagvis/1.6.0-p24
version/checkmk nagvis/1.6.0-p25
version/checkmk nagvis/1.6.0-p26
version/checkmk nagvis/1.6.0-p27
version/checkmk nagvis/1.6.0-p28
version/checkmk nagvis/1.6.0-p29
version/checkmk nagvis/1.6.0-p3
version/checkmk nagvis/1.6.0-p4
version/checkmk nagvis/1.6.0-p5
version/checkmk nagvis/1.6.0-p6
version/checkmk nagvis/1.6.0-p7
version/checkmk nagvis/1.6.0-p8
version/checkmk nagvis/1.6.0-p9
vendor/checkmk