What is the severity of CVE-2023-31209?

CVE-2023-31209 has a high severity rating due to its potential for arbitrary command execution.

How do I fix CVE-2023-31209?

To fix CVE-2023-31209, upgrade to Checkmk version 2.1.0p32 or higher, 2.0.0p38 or higher, or 2.2.0p4 or higher.

What effect does CVE-2023-31209 have on my system?

CVE-2023-31209 allows authenticated users to execute arbitrary commands on the affected Checkmk systems.

Which versions of Checkmk are affected by CVE-2023-31209?

CVE-2023-31209 affects Checkmk versions earlier than 2.1.0p32, 2.0.0p38, and 2.2.0p4.

Is CVE-2023-31209 exploitable remotely?

CVE-2023-31209 requires authentication, meaning it is not exploitable remotely without valid credentials.

Vulnerability/
CVE-2023-31209

high

8.8

CWE

74 78

10/8/2023

28/8/2024

CVE-2023-31209: Command injection via active checks and REST API

First published: Thu Aug 10 2023(Updated: )

Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.

Credit: security@checkmk.com

Affected Software	Affected Version	How to fix
Checkmk NagVis	<2.0.0
Checkmk NagVis	=2.0.0
Checkmk NagVis	=2.0.0-b1
Checkmk NagVis	=2.0.0-b2
Checkmk NagVis	=2.0.0-b3
Checkmk NagVis	=2.0.0-b4
Checkmk NagVis	=2.0.0-b5
Checkmk NagVis	=2.0.0-b6
Checkmk NagVis	=2.0.0-b7
Checkmk NagVis	=2.0.0-b8
Checkmk NagVis	=2.0.0-i1
Checkmk NagVis	=2.0.0-p1
Checkmk NagVis	=2.0.0-p10
Checkmk NagVis	=2.0.0-p11
Checkmk NagVis	=2.0.0-p12
Checkmk NagVis	=2.0.0-p13
Checkmk NagVis	=2.0.0-p14
Checkmk NagVis	=2.0.0-p15
Checkmk NagVis	=2.0.0-p16
Checkmk NagVis	=2.0.0-p17
Checkmk NagVis	=2.0.0-p18
Checkmk NagVis	=2.0.0-p19
Checkmk NagVis	=2.0.0-p2
Checkmk NagVis	=2.0.0-p20
Checkmk NagVis	=2.0.0-p21
Checkmk NagVis	=2.0.0-p22
Checkmk NagVis	=2.0.0-p23
Checkmk NagVis	=2.0.0-p24
Checkmk NagVis	=2.0.0-p25
Checkmk NagVis	=2.0.0-p26
Checkmk NagVis	=2.0.0-p27
Checkmk NagVis	=2.0.0-p28
Checkmk NagVis	=2.0.0-p29
Checkmk NagVis	=2.0.0-p3
Checkmk NagVis	=2.0.0-p30
Checkmk NagVis	=2.0.0-p31
Checkmk NagVis	=2.0.0-p32
Checkmk NagVis	=2.0.0-p33
Checkmk NagVis	=2.0.0-p34
Checkmk NagVis	=2.0.0-p35
Checkmk NagVis	=2.0.0-p36
Checkmk NagVis	=2.0.0-p37
Checkmk NagVis	=2.0.0-p4
Checkmk NagVis	=2.0.0-p5
Checkmk NagVis	=2.0.0-p6
Checkmk NagVis	=2.0.0-p7
Checkmk NagVis	=2.0.0-p8
Checkmk NagVis	=2.0.0-p9
Checkmk NagVis	=2.1.0
Checkmk NagVis	=2.1.0-b1
Checkmk NagVis	=2.1.0-b2
Checkmk NagVis	=2.1.0-b3
Checkmk NagVis	=2.1.0-b4
Checkmk NagVis	=2.1.0-b5
Checkmk NagVis	=2.1.0-b6
Checkmk NagVis	=2.1.0-b7
Checkmk NagVis	=2.1.0-b8
Checkmk NagVis	=2.1.0-b9
Checkmk NagVis	=2.1.0-p1
Checkmk NagVis	=2.1.0-p10
Checkmk NagVis	=2.1.0-p11
Checkmk NagVis	=2.1.0-p12
Checkmk NagVis	=2.1.0-p13
Checkmk NagVis	=2.1.0-p14
Checkmk NagVis	=2.1.0-p15
Checkmk NagVis	=2.1.0-p16
Checkmk NagVis	=2.1.0-p17
Checkmk NagVis	=2.1.0-p18
Checkmk NagVis	=2.1.0-p19
Checkmk NagVis	=2.1.0-p2
Checkmk NagVis	=2.1.0-p20
Checkmk NagVis	=2.1.0-p21
Checkmk NagVis	=2.1.0-p22
Checkmk NagVis	=2.1.0-p23
Checkmk NagVis	=2.1.0-p24
Checkmk NagVis	=2.1.0-p25
Checkmk NagVis	=2.1.0-p26
Checkmk NagVis	=2.1.0-p27
Checkmk NagVis	=2.1.0-p28
Checkmk NagVis	=2.1.0-p29
Checkmk NagVis	=2.1.0-p3
Checkmk NagVis	=2.1.0-p30
Checkmk NagVis	=2.1.0-p31
Checkmk NagVis	=2.1.0-p4
Checkmk NagVis	=2.1.0-p5
Checkmk NagVis	=2.1.0-p6
Checkmk NagVis	=2.1.0-p7
Checkmk NagVis	=2.1.0-p8
Checkmk NagVis	=2.1.0-p9
Checkmk NagVis	=2.2.0
Checkmk NagVis	=2.2.0-b1
Checkmk NagVis	=2.2.0-b2
Checkmk NagVis	=2.2.0-b3
Checkmk NagVis	=2.2.0-b4
Checkmk NagVis	=2.2.0-b5
Checkmk NagVis	=2.2.0-b6
Checkmk NagVis	=2.2.0-b7
Checkmk NagVis	=2.2.0-b8
Checkmk NagVis	=2.2.0-i1
Checkmk NagVis	=2.2.0-p1
Checkmk NagVis	=2.2.0-p2
Checkmk NagVis	=2.2.0-p3
Checkmk NagVis	=2.0.0
Checkmk NagVis	=2.0.0-b1
Checkmk NagVis	=2.0.0-b2
Checkmk NagVis	=2.0.0-b3
Checkmk NagVis	=2.0.0-b4
Checkmk NagVis	=2.0.0-b5
Checkmk NagVis	=2.0.0-b6
Checkmk NagVis	=2.0.0-b7
Checkmk NagVis	=2.0.0-b8
Checkmk NagVis	=2.0.0-i1
Checkmk NagVis	=2.0.0-p1
Checkmk NagVis	=2.0.0-p10
Checkmk NagVis	=2.0.0-p11
Checkmk NagVis	=2.0.0-p12
Checkmk NagVis	=2.0.0-p13
Checkmk NagVis	=2.0.0-p14
Checkmk NagVis	=2.0.0-p15
Checkmk NagVis	=2.0.0-p16
Checkmk NagVis	=2.0.0-p17
Checkmk NagVis	=2.0.0-p18
Checkmk NagVis	=2.0.0-p19
Checkmk NagVis	=2.0.0-p2
Checkmk NagVis	=2.0.0-p20
Checkmk NagVis	=2.0.0-p21
Checkmk NagVis	=2.0.0-p22
Checkmk NagVis	=2.0.0-p23
Checkmk NagVis	=2.0.0-p24
Checkmk NagVis	=2.0.0-p25
Checkmk NagVis	=2.0.0-p26
Checkmk NagVis	=2.0.0-p27
Checkmk NagVis	=2.0.0-p28
Checkmk NagVis	=2.0.0-p29
Checkmk NagVis	=2.0.0-p3
Checkmk NagVis	=2.0.0-p30
Checkmk NagVis	=2.0.0-p31
Checkmk NagVis	=2.0.0-p32
Checkmk NagVis	=2.0.0-p33
Checkmk NagVis	=2.0.0-p34
Checkmk NagVis	=2.0.0-p35
Checkmk NagVis	=2.0.0-p36
Checkmk NagVis	=2.0.0-p37
Checkmk NagVis	=2.0.0-p4
Checkmk NagVis	=2.0.0-p5
Checkmk NagVis	=2.0.0-p6
Checkmk NagVis	=2.0.0-p7
Checkmk NagVis	=2.0.0-p8
Checkmk NagVis	=2.0.0-p9
Checkmk NagVis	=2.1.0
Checkmk NagVis	=2.1.0-b1
Checkmk NagVis	=2.1.0-b2
Checkmk NagVis	=2.1.0-b3
Checkmk NagVis	=2.1.0-b4
Checkmk NagVis	=2.1.0-b5
Checkmk NagVis	=2.1.0-b6
Checkmk NagVis	=2.1.0-b7
Checkmk NagVis	=2.1.0-b8
Checkmk NagVis	=2.1.0-b9
Checkmk NagVis	=2.1.0-p1
Checkmk NagVis	=2.1.0-p10
Checkmk NagVis	=2.1.0-p11
Checkmk NagVis	=2.1.0-p12
Checkmk NagVis	=2.1.0-p13
Checkmk NagVis	=2.1.0-p14
Checkmk NagVis	=2.1.0-p15
Checkmk NagVis	=2.1.0-p16
Checkmk NagVis	=2.1.0-p17
Checkmk NagVis	=2.1.0-p18
Checkmk NagVis	=2.1.0-p19
Checkmk NagVis	=2.1.0-p2
Checkmk NagVis	=2.1.0-p20
Checkmk NagVis	=2.1.0-p21
Checkmk NagVis	=2.1.0-p22
Checkmk NagVis	=2.1.0-p23
Checkmk NagVis	=2.1.0-p24
Checkmk NagVis	=2.1.0-p25
Checkmk NagVis	=2.1.0-p26
Checkmk NagVis	=2.1.0-p27
Checkmk NagVis	=2.1.0-p28
Checkmk NagVis	=2.1.0-p29
Checkmk NagVis	=2.1.0-p3
Checkmk NagVis	=2.1.0-p30
Checkmk NagVis	=2.1.0-p31
Checkmk NagVis	=2.1.0-p4
Checkmk NagVis	=2.1.0-p5
Checkmk NagVis	=2.1.0-p6
Checkmk NagVis	=2.1.0-p7
Checkmk NagVis	=2.1.0-p8
Checkmk NagVis	=2.1.0-p9
Checkmk NagVis	=2.2.0
Checkmk NagVis	=2.2.0-b1
Checkmk NagVis	=2.2.0-b2
Checkmk NagVis	=2.2.0-b3
Checkmk NagVis	=2.2.0-b4
Checkmk NagVis	=2.2.0-b5
Checkmk NagVis	=2.2.0-b6
Checkmk NagVis	=2.2.0-b7
Checkmk NagVis	=2.2.0-b8
Checkmk NagVis	=2.2.0-i1
Checkmk NagVis	=2.2.0-p1
Checkmk NagVis	=2.2.0-p2
Checkmk NagVis	=2.2.0-p3

Never miss a vulnerability like this again

Reference Links

https://checkmk.com/werk/15194

Frequently Asked Questions

What is the severity of CVE-2023-31209?
CVE-2023-31209 has a high severity rating due to its potential for arbitrary command execution.
How do I fix CVE-2023-31209?
To fix CVE-2023-31209, upgrade to Checkmk version 2.1.0p32 or higher, 2.0.0p38 or higher, or 2.2.0p4 or higher.
What effect does CVE-2023-31209 have on my system?
CVE-2023-31209 allows authenticated users to execute arbitrary commands on the affected Checkmk systems.
Which versions of Checkmk are affected by CVE-2023-31209?
CVE-2023-31209 affects Checkmk versions earlier than 2.1.0p32, 2.0.0p38, and 2.2.0p4.
Is CVE-2023-31209 exploitable remotely?
CVE-2023-31209 requires authentication, meaning it is not exploitable remotely without valid credentials.

agent/author
agent/type
agent/references
agent/description
agent/softwarecombine
agent/severity
agent/title
agent/weakness
agent/event
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-api
source/NVD
agent/software-canonical-lookup
vendor/tribe29
canonical/checkmk nagvis
version/checkmk nagvis/2.0.0
version/checkmk nagvis/2.0.0-b1
version/checkmk nagvis/2.0.0-b2
version/checkmk nagvis/2.0.0-b3
version/checkmk nagvis/2.0.0-b4
version/checkmk nagvis/2.0.0-b5
version/checkmk nagvis/2.0.0-b6
version/checkmk nagvis/2.0.0-b7
version/checkmk nagvis/2.0.0-b8
version/checkmk nagvis/2.0.0-i1
version/checkmk nagvis/2.0.0-p1
version/checkmk nagvis/2.0.0-p10
version/checkmk nagvis/2.0.0-p11
version/checkmk nagvis/2.0.0-p12
version/checkmk nagvis/2.0.0-p13
version/checkmk nagvis/2.0.0-p14
version/checkmk nagvis/2.0.0-p15
version/checkmk nagvis/2.0.0-p16
version/checkmk nagvis/2.0.0-p17
version/checkmk nagvis/2.0.0-p18
version/checkmk nagvis/2.0.0-p19
version/checkmk nagvis/2.0.0-p2
version/checkmk nagvis/2.0.0-p20
version/checkmk nagvis/2.0.0-p21
version/checkmk nagvis/2.0.0-p22
version/checkmk nagvis/2.0.0-p23
version/checkmk nagvis/2.0.0-p24
version/checkmk nagvis/2.0.0-p25
version/checkmk nagvis/2.0.0-p26
version/checkmk nagvis/2.0.0-p27
version/checkmk nagvis/2.0.0-p28
version/checkmk nagvis/2.0.0-p29
version/checkmk nagvis/2.0.0-p3
version/checkmk nagvis/2.0.0-p30
version/checkmk nagvis/2.0.0-p31
version/checkmk nagvis/2.0.0-p32
version/checkmk nagvis/2.0.0-p33
version/checkmk nagvis/2.0.0-p34
version/checkmk nagvis/2.0.0-p35
version/checkmk nagvis/2.0.0-p36
version/checkmk nagvis/2.0.0-p37
version/checkmk nagvis/2.0.0-p4
version/checkmk nagvis/2.0.0-p5
version/checkmk nagvis/2.0.0-p6
version/checkmk nagvis/2.0.0-p7
version/checkmk nagvis/2.0.0-p8
version/checkmk nagvis/2.0.0-p9
version/checkmk nagvis/2.1.0
version/checkmk nagvis/2.1.0-b1
version/checkmk nagvis/2.1.0-b2
version/checkmk nagvis/2.1.0-b3
version/checkmk nagvis/2.1.0-b4
version/checkmk nagvis/2.1.0-b5
version/checkmk nagvis/2.1.0-b6
version/checkmk nagvis/2.1.0-b7
version/checkmk nagvis/2.1.0-b8
version/checkmk nagvis/2.1.0-b9
version/checkmk nagvis/2.1.0-p1
version/checkmk nagvis/2.1.0-p10
version/checkmk nagvis/2.1.0-p11
version/checkmk nagvis/2.1.0-p12
version/checkmk nagvis/2.1.0-p13
version/checkmk nagvis/2.1.0-p14
version/checkmk nagvis/2.1.0-p15
version/checkmk nagvis/2.1.0-p16
version/checkmk nagvis/2.1.0-p17
version/checkmk nagvis/2.1.0-p18
version/checkmk nagvis/2.1.0-p19
version/checkmk nagvis/2.1.0-p2
version/checkmk nagvis/2.1.0-p20
version/checkmk nagvis/2.1.0-p21
version/checkmk nagvis/2.1.0-p22
version/checkmk nagvis/2.1.0-p23
version/checkmk nagvis/2.1.0-p24
version/checkmk nagvis/2.1.0-p25
version/checkmk nagvis/2.1.0-p26
version/checkmk nagvis/2.1.0-p27
version/checkmk nagvis/2.1.0-p28
version/checkmk nagvis/2.1.0-p29
version/checkmk nagvis/2.1.0-p3
version/checkmk nagvis/2.1.0-p30
version/checkmk nagvis/2.1.0-p31
version/checkmk nagvis/2.1.0-p4
version/checkmk nagvis/2.1.0-p5
version/checkmk nagvis/2.1.0-p6
version/checkmk nagvis/2.1.0-p7
version/checkmk nagvis/2.1.0-p8
version/checkmk nagvis/2.1.0-p9
version/checkmk nagvis/2.2.0
version/checkmk nagvis/2.2.0-b1
version/checkmk nagvis/2.2.0-b2
version/checkmk nagvis/2.2.0-b3
version/checkmk nagvis/2.2.0-b4
version/checkmk nagvis/2.2.0-b5
version/checkmk nagvis/2.2.0-b6
version/checkmk nagvis/2.2.0-b7
version/checkmk nagvis/2.2.0-b8
version/checkmk nagvis/2.2.0-i1
version/checkmk nagvis/2.2.0-p1
version/checkmk nagvis/2.2.0-p2
version/checkmk nagvis/2.2.0-p3
vendor/checkmk