Show filters
18 Total Results
Displaying 1-10 of 18
Sort by:
Attacker Value
Unknown

CVE-2023-6740

Disclosure Date: January 12, 2024 (last updated July 24, 2024)
Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges
Attacker Value
Unknown

CVE-2023-6735

Disclosure Date: January 12, 2024 (last updated July 24, 2024)
Privilege escalation in mk_tsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges
Attacker Value
Unknown

CVE-2023-31211

Disclosure Date: January 12, 2024 (last updated July 24, 2024)
Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials
Attacker Value
Unknown

CVE-2023-6287

Disclosure Date: November 27, 2023 (last updated December 01, 2023)
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files.
Attacker Value
Unknown

CVE-2023-31209

Disclosure Date: August 10, 2023 (last updated July 24, 2024)
Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.
Attacker Value
Unknown

CVE-2023-22348

Disclosure Date: May 17, 2023 (last updated July 24, 2024)
Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.
Attacker Value
Unknown

CVE-2023-31208

Disclosure Date: May 17, 2023 (last updated July 24, 2024)
Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8 (beta) allows arbitrary livestatus command execution for authorized users.
Attacker Value
Unknown

CVE-2023-22318

Disclosure Date: May 15, 2023 (last updated October 08, 2023)
Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5.
Attacker Value
Unknown

CVE-2023-22309

Disclosure Date: April 20, 2023 (last updated October 08, 2023)
Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4.
Attacker Value
Unknown

CVE-2023-22307

Disclosure Date: April 18, 2023 (last updated October 08, 2023)
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords via reading log files.