Checkmk werks security January 2017

checkmk-werks-sec@lists.checkmk.com

2 participants
3 discussions

Check_MK Werk 8463: MKP Manager: Fixed possible HTML/JS injection from installed MKPs

by Lars Michelsen

ID: 8463 Title: MKP Manager: Fixed possible HTML/JS injection from installed MKPs Component: WATO Level: 1 Class: Security Fix Version: 1.2.9i1

7 years, 3 months

Check_MK Werk 8467: Fixed two stored XSS issues on the report scheduler page

by Lars Michelsen

ID: 8467 Title: Fixed two stored XSS issues on the report scheduler page Component: Reporting Level: 1 Class: Security Fix Version: 1.2.9i1

7 years, 3 months

Check_MK Werk 8585: Fix permission: normal users were allowed to manage MKPs - not anymore

by Mathias Kettner

ID: 8585 Title: Fix permission: normal users were allowed to manage MKPs - not anymore Component: WATO Level: 2 Class: Security Fix Version: 1.2.9i1 The new MKP manager module in WATO was preconfigured in a way that a normal monitoring user could manage MKP packages. This is considered as a bug and now only the <tt>admin</tt> role is allowed to manage packages.

7 years, 3 months

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

Checkmk werks security January 2017