CVE-2024-13723: Checkmk NagVis Remote Code Execution
The "NagVis" component within Checkmk is vulnerable to remote code execution. An authenticated attacker with administrative level privileges is able to upload a malicious PHP file and modify specific settings to execute the contents of the file as PHP.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/nagvisto a version that resolves this vulnerability.Fixed in 1:1.9.42-1 - Upgrade
Upgrade
debian/nagvisto a version that resolves this vulnerability.Fixed in 1:1.9.47-1Fixed in 1:1.10.6-1Fixed in 1:1.10.7-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13723?
CVE-2024-13723 is a critical vulnerability that allows remote code execution.
How do I fix CVE-2024-13723?
To fix CVE-2024-13723, upgrade the NagVis component within Checkmk to the latest patched version.
Who can exploit CVE-2024-13723?
An authenticated attacker with administrative privileges can exploit CVE-2024-13723.
What type of vulnerability is CVE-2024-13723?
CVE-2024-13723 is classified as a remote code execution vulnerability.
What components are affected by CVE-2024-13723?
CVE-2024-13723 affects the NagVis component within Checkmk.