CVE-2017-11507

high-risk

Published 2017-12-11

A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript via the output_format parameter, and the username parameter of failed HTTP basic authentication attempts, which is returned unencoded in an internal server error page.

Do I need to act?

0.35% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.1/10 Medium

NETWORK / LOW complexity

Affected Products (20)

Check Mk

Affected Vendors

Check Mk Project

References (4)

Vendor Advisory http://mathias-kettner.com/check_mk_werks.php?werk_id=7661

Exploit https://www.tenable.com/security/research/tra-2017-20

Vendor Advisory http://mathias-kettner.com/check_mk_werks.php?werk_id=7661

Exploit https://www.tenable.com/security/research/tra-2017-20

/ 100

high-risk

Severity 23/34 · High

Exploitability 1/34 · Minimal

Exposure 26/34 · High