The wato component in Check_MK before 1.2.4p4 and 1.2.5... · CVE-2014-5340 · GitHub Advisory Database · GitHub

The wato component in Check_MK before 1.2.4p4 and 1.2.5...

High severity Unreviewed Published May 14, 2022 to the GitHub Advisory Database • Updated Feb 2, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automation URL.

References

Published by the National Vulnerability Database

Sep 2, 2014

Published to the GitHub Advisory Database May 14, 2022

Last updated Feb 2, 2023