Сохранение межсайтовых сценариев в выходных данных активной проверки обнаружения службы в Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48 и всех версиях 2.2.0 позволяет администратору, который может настраивать активные или пользовательские проверки, вставлять вредоносный HTML или JavaScript в выходные данные проверки, которые выполняются в браузере администратора или пользователя с разрешениями на чтение хоста при запуске проверки на странице обнаружения службы.
Показать оригинальное описание (EN)
Stored cross-site scripting in the service discovery active check output in Checkmk <2.5.0p5, <2.4.0p31, <2.3.0p48, and all 2.2.0 versions allows an administrator who can configure active or custom checks to inject malicious HTML or JavaScript into check output that executes in the browser of an admin or a user with host read permissions when they run the check on the service discovery page.
Характеристики атаки
Способ атаки
По сети
Атака возможна удалённо
Сложность
Низкая
Легко эксплуатировать
Условия для атаки
Не требуются
Нет дополнительных условий
Нужны права
Высокие
Нужны права администратора
Участие пользователя
Пассивное
Минимальное взаимодействие
Последствия
Конфиденциальность
Нет
Нет утечки данных
Целостность
Низкое
Частичная модификация данных
Доступность
Нет
Нет нарушения работы
Строка CVSS v4.0
Тип уязвимости (CWE)
Уязвимые продукты 157
| Конфигурация | От (включительно) | До (исключительно) |
|---|---|---|
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:-:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:b1:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:b2:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:b3:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:b4:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:b5:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:b6:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:b7:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:b8:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:i1:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p1:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p10:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p11:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p12:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p13:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p14:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p15:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p16:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p17:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p18:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p19:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p2:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p20:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p21:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p22:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p23:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p24:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p25:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p26:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p27:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p28:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p29:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p3:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p30:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p31:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p32:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p33:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p34:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p35:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p36:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p37:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p38:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p39:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p4:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p40:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p41:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p42:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p43:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p44:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p45:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p46:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p47:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p5:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p6:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p7:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p8:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.2.0:p9:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:-:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:b1:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:b2:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:b3:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:b4:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:b5:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:b6:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p1:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p10:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p11:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p12:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p13:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p14:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p15:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p16:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p17:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p18:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p19:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p2:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p20:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p21:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p22:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p23:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p24:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p25:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p26:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p27:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p28:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p29:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p3:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p30:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p31:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p32:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p33:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p34:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p35:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p36:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p37:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p38:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p39:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p4:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p40:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p41:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p42:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p43:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p44:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p45:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p46:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p47:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p5:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p6:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p7:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p8:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.3.0:p9:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:*:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:-:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:b1:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:b2:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:b3:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:b4:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:b5:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:b6:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p1:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p10:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p11:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p12:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p13:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p14:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p15:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p16:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p17:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p18:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p19:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p2:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p20:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p21:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p22:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p23:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p24:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p25:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p26:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p27:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p28:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p29:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p3:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p30:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p4:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p5:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p6:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p7:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p8:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.4.0:p9:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.5.0:-:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.5.0:b1:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.5.0:b2:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.5.0:b3:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.5.0:p1:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.5.0:p2:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.5.0:p3:*:*:*:*:*:*
|
— | — |
|
Checkmk Checkmk
cpe:2.3:a:checkmk:checkmk:2.5.0:p4:*:*:*:*:*:*
|
— | — |