CVE-2014-2332

Published: 31 August 2015

Check_MK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows remote authenticated users to delete arbitrary files via a request to an unspecified link, related to "Insecure Direct Object References." NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330.

Priority

Status

Package	Release	Status
check-mk Launchpad, Ubuntu, Debian	precise	Ignored (end of life)
	trusty	Does not exist (trusty was not-affected [1.2.2p3-1])
	upstream	Released (1.2.2p3-1)
	vivid	Not vulnerable
	wily	Not vulnerable
	xenial	Not vulnerable
	yakkety	Not vulnerable
	zesty	Not vulnerable

References

http://packetstormsecurity.com/files/125850/DTC-A-20140324-002.txt
https://www.cve.org/CVERecord?id=CVE-2014-2332
NVD
Launchpad
Debian

Bugs

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742689

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›