| Package | Affected versions | Patched versions |
|---|---|---|
| check mk | ≤ 1.2.2≤ 1.2.3 |
Check_MK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows remote authenticated users to delete arbitrary files via a request to an unspecified link, related to "Insecure Direct Object References." NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free