Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Checkmk 2.1.0p48, 2.2.0p35, 2.3.0p18 Clear all filters
TI-2024-26069 CVE-2024-38863 · GHSA-wvvr-rxq8-c379

CSRF token leaked in URL parameters

Priority LOW 11

Exposure of CSRF tokens in query parameters on specific requests in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35 and <2.1.0p48 could lead to a leak of the token to facilitate targeted phishing attacks.

CVSS 4.0LOW 2.0 Network High privileges No interaction EPSS 0.00417 Published 2024-10-14 Fixed in 2.1.0p48, 2.2.0p35 +1 CWE-598
TI-2024-26068 CVE-2024-38862 · GHSA-mwrq-qv64-xgq7

SNMP and IMPI secrets written to audit log

Priority LOW 23

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35, <2.1.0p48 and <=2.0.0p39 (EOL) causes SNMP and IMPI secrets of host and folder properties to be written to audit l…

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.0032 Published 2024-10-14 Fixed in 2.1.0p48, 2.2.0p35 +1 CWE-532