
Application: CheckMK Management Web Console
Software Revision: From 1.5.0 to 1.5.0p25
Attack type: RCE
Solution: Upgrade to version 1.6 or higher.
Summary: The web management console of CheckMk Raw Edition (versions 1.5.0 to 1.5.0p25) allows a misconfiguration of the web-app Dokuwiki (installed by default) which allows embedded php code. As a result, remote code execution is achieved. Successful exploitation requires access to the web management interface, either with valid credentials or with a hijacked session by a user with the role of administrator.
Technical Description: See CVE-2021-40904
Timeline:
Reference:
PoC checkmk version 1.5.0p25 Raw Edition
RCE Dokuwiki