What’s Vulnerable › Vulnerabilities

CVE-2022-37298

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-10-20 · updated 2026-06-17
• Weakness: CWE-287

Description

Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The SafeUnpickler class found in shinken/safepickle.py implements a weak authentication scheme when unserializing objects passed from monitoring nodes to the Shinken monitoring server.

Affected products

• Shinken-Monitoring Shinken Monitoring: 2.4.3

References

• https://github.com/dbyio/cve-2022-37298
• https://github.com/naparuba/shinken/commit/2dae40fd1e713aec9e1966a0ab7a580b9180cff2
• https://github.com/dbyio/cve-2022-37298
• https://github.com/naparuba/shinken/commit/2dae40fd1e713aec9e1966a0ab7a580b9180cff2

Get alerted when CVE-2022-37298 or the next vulnerability affects your stack