Vulnerabilidades de Tribe29

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Tribe29: 3 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2023-31209 Alta · 8.8 CWE-74 10/08/2023

Command injection via active checks and REST API

Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.

CVE-2023-22348 Média · 4.3 CWE-285 17/05/2023

Reading host_configs does not honour contact groups

Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.

CVE-2023-31208 Alta · 8.8 CWE-77 17/05/2023

Livestatus command injection in RestAPI

Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8 (beta) allows arbitrary livestatus command execution for authorized users.