CVE Intelligence

Tribe29 vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Tribe29 products: 3 record(s), with severity, exploitation and fixes.

Checkmk 3

Exploited only (KEV) →

CVE-2023-31209 High · 8.8 CWE-74 Aug 10, 2023
Command injection via active checks and REST API
Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.
CVE-2023-22348 Medium · 4.3 CWE-285 May 17, 2023
Reading host_configs does not honour contact groups
Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.
CVE-2023-31208 High · 8.8 CWE-77 May 17, 2023
Livestatus command injection in RestAPI
Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8 (beta) allows arbitrary livestatus command execution for authorized users.