← Back

CVE-2025-32918

nvd nist
Published: Jul 4, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: security@checkmk.com (Secondary)

Description

Improper neutralization of Livestatus command delimiters in autocomplete endpoint within the RestAPI of Checkmk versions <2.4.0p6, <2.3.0p35, <2.2.0p44, and 2.1.0 (EOL) allows an authenticated user to inject arbitrary Livestatus commands.

Affected (107)

Products: Checkmk: Checkmk
Checkmk
1 product
Checkmk
Configuration A
107 vulnerable
Vulnerable SoftwareAffected Versions
Checkmk
Checkmk
Version 2.1.0
Checkmk
Version 2.2.0
Checkmk
Version 2.2.0 b1
Checkmk
Version 2.2.0 b2
Checkmk
Version 2.2.0 b3
Checkmk
Version 2.2.0 b4
Checkmk
Version 2.2.0 b5
Checkmk
Version 2.2.0 b6
Checkmk
Version 2.2.0 b7
Checkmk
Version 2.2.0 b8
Checkmk
Version 2.2.0 i1
Checkmk
Version 2.2.0 p10
Checkmk
Version 2.2.0 p11
Checkmk
Version 2.2.0 p12
Checkmk
Version 2.2.0 p13
Checkmk
Version 2.2.0 p14
Checkmk
Version 2.2.0 p15
Checkmk
Version 2.2.0 p16
Checkmk
Version 2.2.0 p17
Checkmk
Version 2.2.0 p18
Checkmk
Version 2.2.0 p19
Checkmk
Version 2.2.0 p1
Checkmk
Version 2.2.0 p20
Checkmk
Version 2.2.0 p21
Checkmk
Version 2.2.0 p22
Checkmk
Version 2.2.0 p23
Checkmk
Version 2.2.0 p24
Checkmk
Version 2.2.0 p25
Checkmk
Version 2.2.0 p26
Checkmk
Version 2.2.0 p27
Checkmk
Version 2.2.0 p28
Checkmk
Version 2.2.0 p29
Checkmk
Version 2.2.0 p2
Checkmk
Version 2.2.0 p30
Checkmk
Version 2.2.0 p31
Checkmk
Version 2.2.0 p32
Checkmk
Version 2.2.0 p33
Checkmk
Version 2.2.0 p34
Checkmk
Version 2.2.0 p35
Checkmk
Version 2.2.0 p36
Checkmk
Version 2.2.0 p37
Checkmk
Version 2.2.0 p38
Checkmk
Version 2.2.0 p39
Checkmk
Version 2.2.0 p3
Checkmk
Version 2.2.0 p40
Checkmk
Version 2.2.0 p41
Checkmk
Version 2.2.0 p42
Checkmk
Version 2.2.0 p43
Checkmk
Version 2.2.0 p4
Checkmk
Version 2.2.0 p5
Checkmk
Version 2.2.0 p6
Checkmk
Version 2.2.0 p7
Checkmk
Version 2.2.0 p8
Checkmk
Version 2.2.0 p9
Checkmk
Version 2.3.0
Checkmk
Version 2.3.0 b1
Checkmk
Version 2.3.0 b2
Checkmk
Version 2.3.0 b3
Checkmk
Version 2.3.0 b4
Checkmk
Version 2.3.0 b5
Checkmk
Version 2.3.0 b6
Checkmk
Version 2.3.0 p10
Checkmk
Version 2.3.0 p11
Checkmk
Version 2.3.0 p12
Checkmk
Version 2.3.0 p13
Checkmk
Version 2.3.0 p14
Checkmk
Version 2.3.0 p15
Checkmk
Version 2.3.0 p16
Checkmk
Version 2.3.0 p17
Checkmk
Version 2.3.0 p18
Checkmk
Version 2.3.0 p19
Checkmk
Version 2.3.0 p1
Checkmk
Version 2.3.0 p20
Checkmk
Version 2.3.0 p21
Checkmk
Version 2.3.0 p22
Checkmk
Version 2.3.0 p23
Checkmk
Version 2.3.0 p24
Checkmk
Version 2.3.0 p25
Checkmk
Version 2.3.0 p26
Checkmk
Version 2.3.0 p27
Checkmk
Version 2.3.0 p28
Checkmk
Version 2.3.0 p29
Checkmk
Version 2.3.0 p2
Checkmk
Version 2.3.0 p30
Checkmk
Version 2.3.0 p31
Checkmk
Version 2.3.0 p32
Checkmk
Version 2.3.0 p33
Checkmk
Version 2.3.0 p34
Checkmk
Version 2.3.0 p3
Checkmk
Version 2.3.0 p4
Checkmk
Version 2.3.0 p5
Checkmk
Version 2.3.0 p6
Checkmk
Version 2.3.0 p7
Checkmk
Version 2.3.0 p8
Checkmk
Version 2.3.0 p9
Checkmk
Version 2.4.0
Checkmk
Version 2.4.0 b1
Checkmk
Version 2.4.0 b2
Checkmk
Version 2.4.0 b3
Checkmk
Version 2.4.0 b4
Checkmk
Version 2.4.0 b5
Checkmk
Version 2.4.0 b6
Checkmk
Version 2.4.0 p1
Checkmk
Version 2.4.0 p2
Checkmk
Version 2.4.0 p3
Checkmk
Version 2.4.0 p4
Checkmk
Version 2.4.0 p5

Related CWEs

CWE-140
Improper Neutralization of Delimiters
The product does not neutralize or incorrectly neutralizes delimiters.

References (1)

Source: security@checkmk.com
Vendor Advisory

Timeline

No history available yet.