Checkmk werks security August 2023

checkmk-werks-sec@lists.checkmk.com

1 participants
1 discussions

Checkmk Werk 15691: Fix XSS in business intelligence

by Checkmk security werks

ID: 15691 Title: Fix XSS in business intelligence Component: Setup Level: 1 Class: Security fix Version: 2.3.0b1 Prior to this Werk it was possible to inject HTML or Javascript (Reflected XSS). A legitimate user tricked to click on a prepared link would then run arbitrary Javascript code in a valid session. This vulnerability is only triggerable if another Business Intelligence BI pack (next to the default) was created. We found this vulnerability internally. Affected Versions: LI: 2.2.0 LI: 2.1.0 LI: 2.0.0 LI: 1.6.0 (probably older versions as well) Indicators of Compromise: To check for exploitation one can check the site apache access log <tt>var/log/apache/access_log</tt> for entries like <tt>/$SITENAME/check_mk/wato.py?mode=bi_aggregations&bulk_moveto=</tt>. The order of the URL paramters can be changed by an attacker. Potential injected code would be in the parameter <tt>bulk_moveto</tt>. Vulnerability Management: We have rated the issue with a CVSS Score of 5.4 (Medium) with the following CVSS vector: <tt>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N</tt>. We assigned CVE-2023-23548 to this vulnerability. Changes: This Werk introduces escaping for the vulnerable parameter.

9 months, 3 weeks

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

Checkmk werks security August 2023