Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Checkmk 2.1.0p38, 2.2.0p18 Clear all filters
TI-2023-06159 CVE-2023-6740 · GHSA-m89q-5h24-2xm5

Uncontrolled search path in Checkmk

Priority LOW 39

Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0018 Published 2024-01-12 Fixed in 2.2.0p18, 2.1.0p38 CWE-427
TI-2023-06155 CVE-2023-6735 · GHSA-hgr6-fxr2-jx3f

Improper privilege management in Checkmk

Priority MEDIUM 40

Privilege escalation in mk_tsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00279 Published 2024-01-12 Fixed in 2.2.0p18, 2.1.0p38 CWE-95
TI-2023-14917 CVE-2023-31211 · GHSA-j8hh-2v2c-wqmv

Disabled automation users could still authenticate

Priority LOW 39

Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00511 Published 2024-01-12 Fixed in 2.2.0p18, 2.1.0p38 CWE-303