Tribe29 Checkmk vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Tribe29 Checkmk: 3 record(s), with affected versions and fixes.
cpe:2.3:a:tribe29:checkmk

CVE-2023-31209 High · 8.8 CWE-74 Aug 10, 2023

Command injection via active checks and REST API

Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.

CVE-2023-22348 Medium · 4.3 CWE-285 May 17, 2023

Reading host_configs does not honour contact groups

Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.

CVE-2023-31208 High · 8.8 CWE-77 May 17, 2023

Livestatus command injection in RestAPI

Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8 (beta) allows arbitrary livestatus command execution for authorized users.