writeups.xyz / Checkmk: Remote Code Execution by Chaining Multiple Bugs (1/3)

Submitter : c2a

Date: 15 November 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• Code Injection
• SSRF
• Line Feed Injection
• Arbitrary File Read
• Authentication Bypass
• Security Code Review

Programs :

• Checkmk

Authors :

• Stefan Schiller (@Scryh_)

Link :
https://blog.sonarsource.com/checkmk-rce-chain-1/