cve/2022/CVE-2022-37298.md

CVE-2022-37298

Description

Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The SafeUnpickler class found in shinken/safepickle.py implements a weak authentication scheme when unserializing objects passed from monitoring nodes to the Shinken monitoring server.

POC

Reference

• https://github.com/dbyio/cve-2022-37298

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/dbyio/cve-2022-37298
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/manas3c/CVE-POC
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/whoforget/CVE-POC
• https://github.com/youwizard/CVE-POC