CVE-2014-5339: Check Mk Project Check Mk

Medium severity, CVSS 4.9. EPSS: 1.8% chance of exploitation in the next 30 days.

Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to write check_mk config files (.mk files) to arbitrary locations via vectors related to row selections.

Affected products

• Check Mk Project Check Mk: up to and including 1.2.4; version 1.2.4 only; version 1.2.5 only

Published 2014-09-02. Last modified 2026-06-17.