Tribe29 Checkmk vulnerabilities, page 2
28 vulnerabilities
Known vulnerabilities in Tribe29 Checkmk, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-31207checkmkcheckmk+2
EPSS score0.22%
Transmission of credentials within query parameters in Checkmk <= 2.1.0p26, <= 2.0.0p35, and <= 2.2.0b6 (beta) may cause the automation user's secret to be written to the site Apache access log.CVE-2023-31209checkmk gmbhcheckmk+3EPSS score1.13%
Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.CVE-2023-22294ubuntucheck-mk+2EPSS score0.68%
Privilege escalation in Tribe29 Checkmk Appliance before 1.6.4 allows authenticated site users to escalate privileges via incorrectly set permissions.CVE-2023-22348checkmk gmbhcheckmk+3EPSS score0.59%
Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.CVE-2023-22359checkmkcheckmk+2EPSS score0.50%
User enumeration in Checkmk <=2.2.0p4 allows an authenticated attacker to enumerate usernames.CVE-2023-22288checkmkcheckmk+2EPSS score0.40%
HTML Email Injection in Tribe29 Checkmk <=2.1.0p23; <=2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into EmailsCVE-2023-6735checkmk gmbhcheckmk+3EPSS score0.28%
Privilege escalation in mk_tsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privilegesCVE-2023-6740checkmk gmbhcheckmk+3EPSS score0.18%
Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges