CVE-2014-5340

State: Published
Severity: Not scored
Published: Sep 2, 2014
Updated: Aug 6, 2024
Reserved: Aug 18, 2014

Description

The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automation URL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20140820 Deutsche Telekom CERT Advisory [DTC-A-20140820-001] check_mk vulnerabilitiesmailing-list
RHSA-2015:1495vendor-advisory
http://packetstormsecurity.com/files/127941/Deutsche-Telekom-CERT-Advisory-DTC-A-20140820-001.html
http://mathias-kettner.de/check_mk_werks.php?werk_id=984

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.