| Package | Affected versions | Patched versions |
|---|---|---|
| checkmk | = 1.6.0= 2.0.0= 2.1.0 |
Livestatus Query Language (LQL) injection in the AuthUser HTTP query header of Tribe29's Checkmk <= 2.1.0p11, Checkmk <= 2.0.0p28, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to perform direct queries to the application's core from localhost.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free