USN-5527-2

Dashboard / Vulnerabilities / USN-5527-2

USN-5527-2

Summary: check-mk vulnerabilities

Details: USN-5527-1 fixed vulnerabilities in Checkmk. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Checkmk incorrectly handled authentication. An attacker could possibly use this issue to cause a race condition leading to information disclosure. (CVE-2017-14955) It was discovered that Checkmk incorrectly handled certain inputs. An attacker could use these cross-site scripting issues to inject arbitrary html or javascript code to obtain sensitive information including user information, session cookies and valid credentials. (CVE-2017-9781, CVE-2021-36563, CVE-2021-40906, CVE-2022-24565)

References: https://ubuntu.com/security/notices/USN-5527-2, https://ubuntu.com/security/CVE-2017-9781, https://ubuntu.com/security/CVE-2017-14955, https://ubuntu.com/security/CVE-2021-36563, https://ubuntu.com/security/CVE-2022-24565