Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automation URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mathias Kettner Check_MK 代码注入漏洞
Vulnerability Description
Mathias Kettner Check_MK是德国Mathias Kettner公司的一套开源、通用的Nagios/Icinga（监视系统）数据采集插件，它通过采用新的方法从操作系统和网络组件中收集数据，并支持自动检测主机上的监控项目。 Mathias Kettner Check_MK 1.2.4p4之前版本和1.2.5i4之前1.2.5版本的wato组件中存在安全漏洞，该漏洞源于程序以不安全的方式使用pickle Python模块。远程攻击者可通过特制的序列化对象利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A