Tribe29 Checkmk vulnerabilities

• checkmk Privilege escalation in mk_informix plugin CVE-2024-28824 8.8 HighMarch 22, 2024
• checkmk Privilege escalation in jar_signature CVE-2023-6740 8.8 HighJanuary 12, 2024
• checkmk Privilege escalation in mk_tsm CVE-2023-6735 8.8 HighJanuary 12, 2024
• checkmk Disabled automation users could still authenticate CVE-2023-31211 8.8 HighJanuary 12, 2024
• checkmk gmbh appliance, tribe29 checkmk appliance firmware +1 more Backup password in GET parameter CVE-2023-6287 3.3 LowNovember 27, 2023
• checkmk Command injection via active checks and REST API CVE-2023-31209 8.8 HighAugust 10, 2023
• checkmk User-enumeration in RestAPI CVE-2023-22359 4.3 MediumJune 26, 2023
• checkmk Reading host_configs does not honour contact groups CVE-2023-22348 4.3 MediumMay 17, 2023
• checkmk Livestatus command injection in RestAPI CVE-2023-31208 8.3 HighMay 17, 2023
• checkmk gmbh appliance, tribe29 checkmk appliance, checkmk appliance firmware +2 more Denial of service against webconf CVE-2023-22318 7.5 HighMay 15, 2023
• checkmk Automation user secret logged to Apache access log CVE-2023-31207 4.4 MediumMay 2, 2023
• checkmk Remote Code Execution with Root Privileges via Broad Apache Permissions CVE-2022-46302 8.8 HighApril 20, 2023
• checkmk gmbh appliance, tribe29 checkmk appliance, checkmk appliance firmware +2 more Reflected Cross Site Scripting (XSS) CVE-2023-22309 6.1 MediumApril 20, 2023
• checkmk gmbh appliance, tribe29 checkmk, checkmk appliance +2 more Privilege escalation in Checkmk Appliance CVE-2023-22294 8.8 HighApril 18, 2023
• checkmk gmbh appliance, tribe29 checkmk appliance, checkmk appliance firmware +2 more Site-Passwords in GET parameters CVE-2023-22307 5.5 MediumApril 18, 2023
• checkmk Unauthorized scheduling of downtimes via REST API CVE-2023-2020 4.3 MediumApril 18, 2023
• checkmk Symmetric agent data encryption fails silently CVE-2023-1768 3.7 LowApril 4, 2023
• checkmk Email HTML Injection CVE-2023-22288 6.8 MediumMarch 20, 2023
• checkmk CSRF in add-visual endpoint CVE-2022-48320 5.4 MediumFebruary 20, 2023
• checkmk Host secret disclosed in Checkmk logs CVE-2022-48319 6.5 MediumFebruary 20, 2023
• checkmk Insecure access control mechanisms for RestAPI documentation CVE-2022-48318 5.3 MediumFebruary 20, 2023
• checkmk Insecure Termination of RestAPI Session Tokens CVE-2022-48317 5.6 MediumFebruary 20, 2023
• checkmk SSRF in agent-receiver API CVE-2022-48321 6.8 MediumFebruary 20, 2023
• checkmk LQL Injection in Livestatus HTTP headers CVE-2022-47909 6.8 MediumFebruary 20, 2023
• checkmk PHP code injection in watolib CVE-2022-46836 9.1 CriticalFebruary 20, 2023
• checkmk Command injection in SMS notifications CVE-2022-46303 8.0 HighFebruary 20, 2023
• checkmk Privilege escalation via manipulated unixcat executable CVE-2022-43440 8.8 HighFebruary 9, 2023
• checkmk Improper validation of LDAP user IDs CVE-2023-0284 6.8 MediumJanuary 24, 2023
• checkmk Path-Traversal in MKP storing CVE-2022-4884 3.5 LowJanuary 9, 2023
• checkmk A permission issue affects users that deployed the shipped version of the Checkmk Debian package.... CVE-2022-33912 7.8 HighJune 17, 2022
• checkmk In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can... CVE-2022-31258 8.2 HighMay 20, 2022
• checkmk CheckMK Raw Edition software (versions 1.5.0 to 1.6.0) does not sanitise the input of a web... CVE-2021-40906 Public exploitFix available 6.1 MediumMarch 25, 2022
• checkmk The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not... CVE-2021-40905 Public exploitDisputed 8.8 HighMarch 25, 2022