NetSight
IP …
critical9.3

CVE-2014-5340

The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitra…

Impact

The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automation URL.

Affected products

VendorProductAffected versions
Check Mk ProjectCheck Mk
through 1.2.4
Versions 1.2.4, 1.2.5

Weakness classification

CWE-94

References