Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Tribe29 Component: Checkmk Appliance Firmware Clear all filters
TI-2023-05770 CVE-2023-6287 · GHSA-f347-p5g7-4gg7

Backup password in GET parameter

Priority LOW 24

Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00236 Published 2023-11-27 Fixed in 1.6.8 CWE-598
TI-2023-08583 CVE-2023-22318 · GHSA-h3cr-2x3p-h22w

Denial of service against webconf

Priority MEDIUM 40

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00536 Published 2023-05-15 Fixed in 1.6.5 CWE-412
TI-2023-08572 CVE-2023-22307 · GHSA-jpwr-phpw-6hpw

Site-Passwords in GET parameters

Priority LOW 24

Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords via reading log files.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00223 Published 2023-04-18 Fixed in 1.6.4 CWE-200