check-mk vulnerabilities (Ubuntu)
112 vulnerabilities.
-
check-mkUbuntu Missing authorization for viewing background jobs 5.3 Medium -
check-mkUbuntu Agent receiver accepts mTLS requests without a client certificate 6.9 Medium -
check-mkUbuntu Frozen BI aggregations leak host and service names to unauthorized users 2.3 Low -
check-mkUbuntu Fix Business Intelligence API Pack permission 5.3 Medium -
check-mkUbuntu mk_sap_hana: Privilege escalation via crafted sapstartsrv process name 5.2 Medium -
check-mkUbuntu Fix XSS in service discovery active check output 4.8 Medium -
check-mkUbuntu XSS in urls 8.5 High -
check-mkUbuntu Fix stored XSS in global settings change log 4.8 Medium -
check-mkUbuntu User Messages widget leaked issuer messages on shared dashboards 6.3 Medium -
check-mkUbuntu Fix stored XSS in URL dashboard widget via dangerous URI schemes 8.5 High -
check-mkUbuntu Potential livestatus injection in prediction graph page 5.3 Medium -
check-mkUbuntu Potential livestatus injection in notification test 5.1 Medium -
check-mkUbuntu Livestatus injection in monitoring quicksearch 5.3 Medium -
check-mkUbuntu omd: Local privilege escalation when executing omd commands as root 9.3 Critical -
check-mkUbuntu Cross-site scripting in dashlet title 8.5 High -
check-mkUbuntu Insufficient permission validation on multiple REST API Quick Setup endpoints 5.3 Medium -
check-mkUbuntu Stored cross-site scripting in Pending Changes sidebar 8.5 High -
check-mkUbuntu XSS in Unified Search via Unescaped Host/Service Names 8.6 High -
check-mkUbuntu Session hijacking via exposed session signing secret in distributed Checkmk setups 7.3 High -
check-mkUbuntu Unauthenticated Host Enumeration via Observable Response Discrepancy on Deploy Agent Endpoint 6.3 Medium -
check-mkUbuntu Authenticated Host Enumeration via Observable Response Discrepancy on Agent Register Existing Endpoint 5.3 Medium -
check-mkUbuntu Deletion of passwords via RestApi 5.3 Medium -
check-mkUbuntu Cross-site scripting in HTML logs of Synthetic Monitoring test services 7.3 High -
check-mkUbuntu Missing Permission Check on Analyze Configuration Page 5.3 Medium -
check-mkUbuntu Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule 2.3 Low -
check-mkUbuntu Insufficient permission validation when showing agent information 6.3 Medium -
check-mkUbuntu Insufficient permission validation on multiple REST API endpoints 5.3 Medium -
check-mkUbuntu Insufficient permission validation when configuring notification parameters 5.3 Medium -
check-mkUbuntu Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output 4.8 Medium -
check-mkUbuntu Cross Site Scripting through compromised remote site 8.5 High -
check-mkUbuntu Path-Traversal in report scheduler 7.1 High -
check-mkUbuntu Sensitive form data in URL query parameters 1.0 Low -
check-mkUbuntu Livestatus injection in autocomplete endpoint 5.3 Medium -
check-mkUbuntu Sensitive data exposed during automatic agent updates 4.3 Medium -
check-mkUbuntu Arbitrary file write with vcrtrace 8.7 High -
check-mkUbuntu Privilege escalation in jar_signature 5.2 Medium -
check-mkUbuntu Potentially senitive path exposed via unauthenticated http route 6.3 Medium -
check-mkUbuntu Remote site authentication secrets written to web log 7.1 High -
check-mkUbuntu Livestatus command injection in RestAPI 6.0 Medium -
check-mkUbuntu Session logout can be overwritten by long lasting request 2.3 Low -
check-mkUbuntu LDAP credentials logged to Apache error log 5.6 Medium -
check-mkUbuntu Checkmk NagVis Reflected Cross-site Scripting 5.4 Medium -
check-mkUbuntu Checkmk NagVis Remote Code Execution 7.2 High -
check-mkUbuntu Logging of sitesecret to automations log 5.7 Medium -
check-mkUbuntu CSRF token leaked in URL parameters 2.0 Low -
check-mkUbuntu SNMP and IMPI secrets written to audit log 5.1 Medium -
check-mkUbuntu Information leak in mknotifyd 5.3 Medium -
check-mkUbuntu Fix 2FA bypass via RestAPI 9.2 Critical -
check-mkUbuntu Reflected links in error message facilitate phishing attacks 5.1 Medium -
check-mkUbuntu Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' 6.3 Medium - Show olderLoading…