Checkmk Livestatus Injection Vulnerability in Monitoring Quicksearch

A livestatus injection vulnerability has been identified in the monitoring quicksearch feature of Checkmk versions prior to 2.5.0b4. This vulnerability allows authenticated attackers to inject livestatus commands through the search query, exploiting inadequate input sanitization in the search filter plugins.

Impact

Exploitation of this vulnerability allows for livestatus command injection, which could potentially be used to manipulate monitoring data or behavior.

Remediation

Users can upgrade to Checkmk versions 2.6.0b1 or 2.5.0b4 to address this vulnerability.