CVE-2022-46303 — Command injection in SMS notifications
Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well …
Published: 2023-02-20 · CVSS: 8.0 · CVSS 3.1
Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local permissions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7