CVE-2014-5339

State: Published
Severity: Not scored
Published: Sep 2, 2014
Updated: Aug 6, 2024
Reserved: Aug 18, 2014

Description

Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to write check_mk config files (.mk files) to arbitrary locations via vectors related to row selections.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20140820 Deutsche Telekom CERT Advisory [DTC-A-20140820-001] check_mk vulnerabilitiesmailing-list
RHSA-2015:1495vendor-advisory
http://packetstormsecurity.com/files/127941/Deutsche-Telekom-CERT-Advisory-DTC-A-20140820-001.html
http://mathias-kettner.de/check_mk_werks.php?werk_id=983

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.