製品・ソフトウェアに関する情報

JVN脆弱性詳細

Check MKにおける区切り文字の不適切な無害化に関する脆弱性

タイトル	Check MKにおける区切り文字の不適切な無害化に関する脆弱性
概要	Checkmk 2.5.0b4、2.4.0p26、および 2.3.0p47 の予測グラフページにおけるLivestatusインジェクションは、認証済みユーザーが不十分なサービス説明値のサニタイズにより、細工されたサービス名パラメータを介して任意のLivestatusコマンドを注入できる脆弱性を引き起こします。
想定される影響	当該ソフトウェアが扱う情報の一部が外部に漏れる可能性があります。また、当該ソフトウェアが扱う情報の一部が書き換えられる可能性があります。さらに、当該ソフトウェアの一部が停止する可能性があります。そして、この脆弱性を悪用した攻撃の影響は、他のソフトウェアには及びません。
対策	正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
公表日	2026年4月10日0:00
登録日	2026年4月21日10:48
最終更新日	2026年4月21日10:48

CVSS3.0 : 警告
スコア	6.3
ベクター	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

影響を受けるシステム

Check MK

Check MK 2.3.0

Check MK 2.4.0

Check MK 2.5.0

CVE (情報セキュリティ共通脆弱性識別子)

No	名前	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2026-33457	https://www.cve.org/CVERecord?id=CVE-2026-33457
National Vulnerability Database (NVD)
2	CVE-2026-33457	https://nvd.nist.gov/vuln/detail/CVE-2026-33457

CWE (共通脆弱性タイプ一覧)

No	名前	URL
JVNDB
1	CWE-140	https://cwe.mitre.org/data/definitions/140.html

ベンダー情報

No	名前	URL
Werks
1	Werk #17990: Potential livestatus injection in prediction graph page	https://checkmk.com/werk/17990

変更履歴

No	変更内容	変更日
1	[2026年04月21日] 掲載	2026年4月21日10:48

NVD脆弱性情報

CVE-2026-33457

概要	Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands via a crafted service name parameter due to insufficient sanitization of the service description value.
公表日	2026年4月10日18:16
登録日	2026年4月15日11:36
最終更新日	2026年4月21日2:09

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:checkmk:checkmk:2.3.0:-::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:b1::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:b2::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:b3::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:b4::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:b5::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:b6::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p1::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p10::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p11::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p12::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p13::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p14::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p15::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p16::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p17::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p18::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p19::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p2::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p20::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p21::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p22::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p23::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p24::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p25::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p26::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p27::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p28::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p29::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p3::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p30::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p31::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p32::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p33::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p34::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p35::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p36::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p37::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p38::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p39::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p4::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p40::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p41::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p42::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p43::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p44::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p45::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p46::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p5::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p6::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p7::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p8::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p9::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:-::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:b1::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:b2::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:b3::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:b4::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:b5::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:b6::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p1::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p10::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p11::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p12::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p13::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p14::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p15::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p16::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p17::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p18::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p19::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p2::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p20::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p21::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p22::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p23::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p24::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p25::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p3::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p4::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p5::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p6::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p7::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p8::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p9::::::
cpe:2.3:a:checkmk:checkmk:2.5.0:b1::::::
cpe:2.3:a:checkmk:checkmk:2.5.0:b2::::::
cpe:2.3:a:checkmk:checkmk:2.5.0:b3::::::

構成1	以上	以下	より上	未満
cpe:2.3:a:checkmk:checkmk:2.3.0:-::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:b1::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:b2::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:b3::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:b4::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:b5::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:b6::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p1::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p10::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p11::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p12::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p13::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p14::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p15::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p16::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p17::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p18::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p19::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p2::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p20::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p21::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p22::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p23::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p24::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p25::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p26::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p27::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p28::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p29::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p3::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p30::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p31::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p32::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p33::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p34::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p35::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p36::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p37::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p38::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p39::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p4::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p40::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p41::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p42::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p43::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p44::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p45::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p46::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p5::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p6::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p7::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p8::::::
cpe:2.3:a:checkmk:checkmk:2.3.0:p9::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:-::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:b1::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:b2::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:b3::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:b4::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:b5::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:b6::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p1::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p10::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p11::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p12::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p13::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p14::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p15::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p16::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p17::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p18::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p19::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p2::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p20::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p21::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p22::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p23::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p24::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p25::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p3::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p4::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p5::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p6::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p7::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p8::::::
cpe:2.3:a:checkmk:checkmk:2.4.0:p9::::::
cpe:2.3:a:checkmk:checkmk:2.5.0:b1::::::
cpe:2.3:a:checkmk:checkmk:2.5.0:b2::::::
cpe:2.3:a:checkmk:checkmk:2.5.0:b3::::::