Read the docs
TI-2022-22849 Aliases CVE-2022-46302GHSA-53x8-876g-3h2x

Remote Code Execution with Root Privileges via Broad Apache Permissions

Priority MEDIUM 40CWE-829Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-829.

Summary

Broad access controls could allow site users to directly interact with the system Apache installation when providing the reverse proxy configurations for Tribe29's Checkmk <= 2.1.0p6, Checkmk <= 2.0.0p27, and all versions of Checkmk 1.6.0 (EOL) allowing an attacker to perform remote code execution with root privileges on the underlying host.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00385 32nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Tribe29Checkmk2.0.0 – 2.0.0p27; 2.1.0 – 2.1.0p6; 1.6.0 – 1.6.0p30—No fix listedCNA
  • Checkmk VendorTribe29 Affected 2.0.0 – 2.0.0p27; 2.1.0 – 2.1.0p6; 1.6.0 – 1.6.0p30 Fixed in — No fix listed CNA

CPE configurations NVD · 89

CPEVersionsRoleVendor
cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:*1.6.0VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:b1:*:*:*:*:*:*1.6.0 b1VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:b10:*:*:*:*:*:*1.6.0 b10VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:b11:*:*:*:*:*:*1.6.0 b11VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:b12:*:*:*:*:*:*1.6.0 b12VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:b2:*:*:*:*:*:*1.6.0 b2VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:b3:*:*:*:*:*:*1.6.0 b3VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:b4:*:*:*:*:*:*1.6.0 b4VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:b5:*:*:*:*:*:*1.6.0 b5VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:b6:*:*:*:*:*:*1.6.0 b6VulnerableCheckmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:-:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:b1:*:*:*:*:*:* Versions 1.6.0 b1 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:b10:*:*:*:*:*:* Versions 1.6.0 b10 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:b11:*:*:*:*:*:* Versions 1.6.0 b11 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:b12:*:*:*:*:*:* Versions 1.6.0 b12 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:b2:*:*:*:*:*:* Versions 1.6.0 b2 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:b3:*:*:*:*:*:* Versions 1.6.0 b3 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:b4:*:*:*:*:*:* Versions 1.6.0 b4 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:b5:*:*:*:*:*:* Versions 1.6.0 b5 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:b6:*:*:*:*:*:* Versions 1.6.0 b6 Vulnerable ·Checkmk GmbH
Show 79 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:checkmk:checkmk:1.6.0:b7:*:*:*:*:*:*1.6.0 b7VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:b8:*:*:*:*:*:*1.6.0 b8VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:b9:*:*:*:*:*:*1.6.0 b9VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p1:*:*:*:*:*:*1.6.0 p1VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p10:*:*:*:*:*:*1.6.0 p10VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p11:*:*:*:*:*:*1.6.0 p11VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p12:*:*:*:*:*:*1.6.0 p12VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p13:*:*:*:*:*:*1.6.0 p13VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p14:*:*:*:*:*:*1.6.0 p14VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p15:*:*:*:*:*:*1.6.0 p15VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p16:*:*:*:*:*:*1.6.0 p16VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p17:*:*:*:*:*:*1.6.0 p17VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p18:*:*:*:*:*:*1.6.0 p18VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p19:*:*:*:*:*:*1.6.0 p19VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p2:*:*:*:*:*:*1.6.0 p2VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p20:*:*:*:*:*:*1.6.0 p20VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p21:*:*:*:*:*:*1.6.0 p21VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p22:*:*:*:*:*:*1.6.0 p22VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p23:*:*:*:*:*:*1.6.0 p23VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p24:*:*:*:*:*:*1.6.0 p24VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p25:*:*:*:*:*:*1.6.0 p25VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p26:*:*:*:*:*:*1.6.0 p26VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p27:*:*:*:*:*:*1.6.0 p27VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p28:*:*:*:*:*:*1.6.0 p28VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p29:*:*:*:*:*:*1.6.0 p29VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:1.6.0:p30:*:*:*:*:*:*1.6.0 p30VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:*2.0.0VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*2.0.0 b1VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*2.0.0 b2VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*2.0.0 b3VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*2.0.0 b4VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*2.0.0 b5VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*2.0.0 b6VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*2.0.0 b7VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*2.0.0 b8VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*2.0.0 i1VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:*2.0.0 p1VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p10:*:*:*:*:*:*2.0.0 p10VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p11:*:*:*:*:*:*2.0.0 p11VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p12:*:*:*:*:*:*2.0.0 p12VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p13:*:*:*:*:*:*2.0.0 p13VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p14:*:*:*:*:*:*2.0.0 p14VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p15:*:*:*:*:*:*2.0.0 p15VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p16:*:*:*:*:*:*2.0.0 p16VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p17:*:*:*:*:*:*2.0.0 p17VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p18:*:*:*:*:*:*2.0.0 p18VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p19:*:*:*:*:*:*2.0.0 p19VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p2:*:*:*:*:*:*2.0.0 p2VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p20:*:*:*:*:*:*2.0.0 p20VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p21:*:*:*:*:*:*2.0.0 p21VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p22:*:*:*:*:*:*2.0.0 p22VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p23:*:*:*:*:*:*2.0.0 p23VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p24:*:*:*:*:*:*2.0.0 p24VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p25:*:*:*:*:*:*2.0.0 p25VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p26:*:*:*:*:*:*2.0.0 p26VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p27:*:*:*:*:*:*2.0.0 p27VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p3:*:*:*:*:*:*2.0.0 p3VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p4:*:*:*:*:*:*2.0.0 p4VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p5:*:*:*:*:*:*2.0.0 p5VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p6:*:*:*:*:*:*2.0.0 p6VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p7:*:*:*:*:*:*2.0.0 p7VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p8:*:*:*:*:*:*2.0.0 p8VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.0.0:p9:*:*:*:*:*:*2.0.0 p9VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:-:*:*:*:*:*:*2.1.0VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:b1:*:*:*:*:*:*2.1.0 b1VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:b2:*:*:*:*:*:*2.1.0 b2VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:b3:*:*:*:*:*:*2.1.0 b3VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:b4:*:*:*:*:*:*2.1.0 b4VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:b5:*:*:*:*:*:*2.1.0 b5VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:b6:*:*:*:*:*:*2.1.0 b6VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:b7:*:*:*:*:*:*2.1.0 b7VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:b8:*:*:*:*:*:*2.1.0 b8VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:b9:*:*:*:*:*:*2.1.0 b9VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:p1:*:*:*:*:*:*2.1.0 p1VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:p2:*:*:*:*:*:*2.1.0 p2VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:p3:*:*:*:*:*:*2.1.0 p3VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:p4:*:*:*:*:*:*2.1.0 p4VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:p5:*:*:*:*:*:*2.1.0 p5VulnerableCheckmk GmbH
cpe:2.3:a:checkmk:checkmk:2.1.0:p6:*:*:*:*:*:*2.1.0 p6VulnerableCheckmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:b7:*:*:*:*:*:* Versions 1.6.0 b7 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:b8:*:*:*:*:*:* Versions 1.6.0 b8 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:b9:*:*:*:*:*:* Versions 1.6.0 b9 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p1:*:*:*:*:*:* Versions 1.6.0 p1 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p10:*:*:*:*:*:* Versions 1.6.0 p10 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p11:*:*:*:*:*:* Versions 1.6.0 p11 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p12:*:*:*:*:*:* Versions 1.6.0 p12 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p13:*:*:*:*:*:* Versions 1.6.0 p13 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p14:*:*:*:*:*:* Versions 1.6.0 p14 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p15:*:*:*:*:*:* Versions 1.6.0 p15 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p16:*:*:*:*:*:* Versions 1.6.0 p16 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p17:*:*:*:*:*:* Versions 1.6.0 p17 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p18:*:*:*:*:*:* Versions 1.6.0 p18 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p19:*:*:*:*:*:* Versions 1.6.0 p19 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p2:*:*:*:*:*:* Versions 1.6.0 p2 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p20:*:*:*:*:*:* Versions 1.6.0 p20 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p21:*:*:*:*:*:* Versions 1.6.0 p21 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p22:*:*:*:*:*:* Versions 1.6.0 p22 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p23:*:*:*:*:*:* Versions 1.6.0 p23 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p24:*:*:*:*:*:* Versions 1.6.0 p24 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p25:*:*:*:*:*:* Versions 1.6.0 p25 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p26:*:*:*:*:*:* Versions 1.6.0 p26 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p27:*:*:*:*:*:* Versions 1.6.0 p27 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p28:*:*:*:*:*:* Versions 1.6.0 p28 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p29:*:*:*:*:*:* Versions 1.6.0 p29 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:1.6.0:p30:*:*:*:*:*:* Versions 1.6.0 p30 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:* Versions 2.0.0 b1 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:* Versions 2.0.0 b2 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:* Versions 2.0.0 b3 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:* Versions 2.0.0 b4 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:* Versions 2.0.0 b5 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:* Versions 2.0.0 b6 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:* Versions 2.0.0 b7 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:* Versions 2.0.0 b8 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:* Versions 2.0.0 i1 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:* Versions 2.0.0 p1 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p10:*:*:*:*:*:* Versions 2.0.0 p10 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p11:*:*:*:*:*:* Versions 2.0.0 p11 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p12:*:*:*:*:*:* Versions 2.0.0 p12 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p13:*:*:*:*:*:* Versions 2.0.0 p13 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p14:*:*:*:*:*:* Versions 2.0.0 p14 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p15:*:*:*:*:*:* Versions 2.0.0 p15 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p16:*:*:*:*:*:* Versions 2.0.0 p16 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p17:*:*:*:*:*:* Versions 2.0.0 p17 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p18:*:*:*:*:*:* Versions 2.0.0 p18 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p19:*:*:*:*:*:* Versions 2.0.0 p19 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p2:*:*:*:*:*:* Versions 2.0.0 p2 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p20:*:*:*:*:*:* Versions 2.0.0 p20 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p21:*:*:*:*:*:* Versions 2.0.0 p21 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p22:*:*:*:*:*:* Versions 2.0.0 p22 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p23:*:*:*:*:*:* Versions 2.0.0 p23 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p24:*:*:*:*:*:* Versions 2.0.0 p24 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p25:*:*:*:*:*:* Versions 2.0.0 p25 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p26:*:*:*:*:*:* Versions 2.0.0 p26 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p27:*:*:*:*:*:* Versions 2.0.0 p27 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p3:*:*:*:*:*:* Versions 2.0.0 p3 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p4:*:*:*:*:*:* Versions 2.0.0 p4 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p5:*:*:*:*:*:* Versions 2.0.0 p5 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p6:*:*:*:*:*:* Versions 2.0.0 p6 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p7:*:*:*:*:*:* Versions 2.0.0 p7 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p8:*:*:*:*:*:* Versions 2.0.0 p8 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.0.0:p9:*:*:*:*:*:* Versions 2.0.0 p9 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:-:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:b1:*:*:*:*:*:* Versions 2.1.0 b1 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:b2:*:*:*:*:*:* Versions 2.1.0 b2 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:b3:*:*:*:*:*:* Versions 2.1.0 b3 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:b4:*:*:*:*:*:* Versions 2.1.0 b4 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:b5:*:*:*:*:*:* Versions 2.1.0 b5 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:b6:*:*:*:*:*:* Versions 2.1.0 b6 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:b7:*:*:*:*:*:* Versions 2.1.0 b7 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:b8:*:*:*:*:*:* Versions 2.1.0 b8 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:b9:*:*:*:*:*:* Versions 2.1.0 b9 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:p1:*:*:*:*:*:* Versions 2.1.0 p1 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:p2:*:*:*:*:*:* Versions 2.1.0 p2 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:p3:*:*:*:*:*:* Versions 2.1.0 p3 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:p4:*:*:*:*:*:* Versions 2.1.0 p4 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:p5:*:*:*:*:*:* Versions 2.1.0 p5 Vulnerable ·Checkmk GmbH
  • cpe:2.3:a:checkmk:checkmk:2.1.0:p6:*:*:*:*:*:* Versions 2.1.0 p6 Vulnerable ·Checkmk GmbH

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-46302
  2. 2026-10-03 Alias added: GHSA-53x8-876g-3h2x

References

Advisory 1

  • TI-2021-17818 The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does… CVSS 3.1HIGH 8.8
  • TI-2023-14915 Command injection via active checks and REST API CVSS 3.1HIGH 8.8
  • TI-2022-23931 Insecure Termination of RestAPI Session Tokens CVSS 3.1CRITICAL 9.8
  • TI-2022-23182 Improper input validation in Tribe29 Checkmk CVSS 3.1CRITICAL 9.1
  • TI-2023-14914 Livestatus command injection in RestAPI CVSS 3.1HIGH 8.8
  • TI-2023-08583 Denial of service against webconf CVSS 3.1HIGH 7.5
See all 31 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences