critical9.8
CVE-2022-37298
Shinken Solutions Shinken Monitoring vulnerable to Incorrect Access Control
Impact
Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The `SafeUnpickler` class found in `shinken/safepickle.py` implements a weak authentication scheme when unserializing objects passed from monitoring nodes to the Shinken monitoring server.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | Shinken | <= 2.4.3 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shinken-Monitoring | Shinken Monitoring | Version 2.4.3 |