Lucene search
HistoryJan 12, 2024 - 8:15 a.m.
CVE-2023-31211
cve-2023-31211
checkmk
authentication
security
vulnerability
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.6 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
16.2%
Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials
Affected configurations
Node
tribe29checkmkRange≤2.0.0
ORtribe29checkmkMatch2.0.0b1
ORtribe29checkmkMatch2.0.0b2
ORtribe29checkmkMatch2.0.0b3
ORtribe29checkmkMatch2.0.0b4
ORtribe29checkmkMatch2.0.0b5
ORtribe29checkmkMatch2.0.0b6
ORtribe29checkmkMatch2.0.0b7
ORtribe29checkmkMatch2.0.0b8
ORtribe29checkmkMatch2.0.0i1
ORtribe29checkmkMatch2.0.0p1
ORtribe29checkmkMatch2.0.0p10
ORtribe29checkmkMatch2.0.0p11
ORtribe29checkmkMatch2.0.0p12
ORtribe29checkmkMatch2.0.0p13
ORtribe29checkmkMatch2.0.0p14
ORtribe29checkmkMatch2.0.0p15
ORtribe29checkmkMatch2.0.0p16
ORtribe29checkmkMatch2.0.0p17
ORtribe29checkmkMatch2.0.0p18
ORtribe29checkmkMatch2.0.0p19
ORtribe29checkmkMatch2.0.0p2
ORtribe29checkmkMatch2.0.0p20
ORtribe29checkmkMatch2.0.0p21
ORtribe29checkmkMatch2.0.0p22
ORtribe29checkmkMatch2.0.0p23
ORtribe29checkmkMatch2.0.0p24
ORtribe29checkmkMatch2.0.0p25
ORtribe29checkmkMatch2.0.0p26
ORtribe29checkmkMatch2.0.0p27
ORtribe29checkmkMatch2.0.0p28
ORtribe29checkmkMatch2.0.0p29
ORtribe29checkmkMatch2.0.0p3
ORtribe29checkmkMatch2.0.0p30
ORtribe29checkmkMatch2.0.0p31
ORtribe29checkmkMatch2.0.0p32
ORtribe29checkmkMatch2.0.0p33
ORtribe29checkmkMatch2.0.0p34
ORtribe29checkmkMatch2.0.0p35
ORtribe29checkmkMatch2.0.0p36
ORtribe29checkmkMatch2.0.0p37
ORtribe29checkmkMatch2.0.0p38
ORtribe29checkmkMatch2.0.0p4
ORtribe29checkmkMatch2.0.0p5
ORtribe29checkmkMatch2.0.0p6
ORtribe29checkmkMatch2.0.0p7
ORtribe29checkmkMatch2.0.0p8
ORtribe29checkmkMatch2.0.0p9
ORtribe29checkmkMatch2.1.0-
ORtribe29checkmkMatch2.1.0b1
ORtribe29checkmkMatch2.1.0b2
ORtribe29checkmkMatch2.1.0b3
ORtribe29checkmkMatch2.1.0b4
ORtribe29checkmkMatch2.1.0b5
ORtribe29checkmkMatch2.1.0b6
ORtribe29checkmkMatch2.1.0b7
ORtribe29checkmkMatch2.1.0b8
ORtribe29checkmkMatch2.1.0b9
ORtribe29checkmkMatch2.1.0p1
ORtribe29checkmkMatch2.1.0p10
ORtribe29checkmkMatch2.1.0p11
ORtribe29checkmkMatch2.1.0p12
ORtribe29checkmkMatch2.1.0p13
ORtribe29checkmkMatch2.1.0p14
ORtribe29checkmkMatch2.1.0p15
ORtribe29checkmkMatch2.1.0p16
ORtribe29checkmkMatch2.1.0p17
ORtribe29checkmkMatch2.1.0p18
ORtribe29checkmkMatch2.1.0p19
ORtribe29checkmkMatch2.1.0p2
ORtribe29checkmkMatch2.1.0p20
ORtribe29checkmkMatch2.1.0p21
ORtribe29checkmkMatch2.1.0p22
ORtribe29checkmkMatch2.1.0p23
ORtribe29checkmkMatch2.1.0p24
ORtribe29checkmkMatch2.1.0p25
ORtribe29checkmkMatch2.1.0p26
ORtribe29checkmkMatch2.1.0p27
ORtribe29checkmkMatch2.1.0p28
ORtribe29checkmkMatch2.1.0p29
ORtribe29checkmkMatch2.1.0p3
ORtribe29checkmkMatch2.1.0p30
ORtribe29checkmkMatch2.1.0p31
ORtribe29checkmkMatch2.1.0p32
ORtribe29checkmkMatch2.1.0p33
ORtribe29checkmkMatch2.1.0p34
ORtribe29checkmkMatch2.1.0p35
ORtribe29checkmkMatch2.1.0p36
ORtribe29checkmkMatch2.1.0p37
ORtribe29checkmkMatch2.1.0p4
ORtribe29checkmkMatch2.1.0p5
ORtribe29checkmkMatch2.1.0p6
ORtribe29checkmkMatch2.1.0p7
ORtribe29checkmkMatch2.1.0p8
ORtribe29checkmkMatch2.1.0p9
ORtribe29checkmkMatch2.2.0-
ORtribe29checkmkMatch2.2.0b1
ORtribe29checkmkMatch2.2.0b2
ORtribe29checkmkMatch2.2.0b3
ORtribe29checkmkMatch2.2.0b4
ORtribe29checkmkMatch2.2.0b5
ORtribe29checkmkMatch2.2.0b6
ORtribe29checkmkMatch2.2.0b7
ORtribe29checkmkMatch2.2.0b8
ORtribe29checkmkMatch2.2.0i1
ORtribe29checkmkMatch2.2.0p1
ORtribe29checkmkMatch2.2.0p10
ORtribe29checkmkMatch2.2.0p11
ORtribe29checkmkMatch2.2.0p12
ORtribe29checkmkMatch2.2.0p13
ORtribe29checkmkMatch2.2.0p14
ORtribe29checkmkMatch2.2.0p15
ORtribe29checkmkMatch2.2.0p16
ORtribe29checkmkMatch2.2.0p17
ORtribe29checkmkMatch2.2.0p2
ORtribe29checkmkMatch2.2.0p3
ORtribe29checkmkMatch2.2.0p4
ORtribe29checkmkMatch2.2.0p5
| CPE | Name | Operator | Version |
|---|---|---|---|
| tribe29:checkmk | tribe29 checkmk | le | 2.0.0 |
| tribe29:checkmk | tribe29 checkmk | eq | 2.1.0 |
| tribe29:checkmk | tribe29 checkmk | eq | 2.2.0 |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Checkmk",
"vendor": "Checkmk GmbH",
"versions": [
{
"lessThan": "2.2.0p18",
"status": "affected",
"version": "2.2.0",
"versionType": "semver"
},
{
"lessThan": "2.1.0p38",
"status": "affected",
"version": "2.1.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "2.0.0p39",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
]References
Related
osv
osv
CVE-2023-31211
2024-01-12 08:15:43
ubuntucve
ubuntucve
CVE-2023-31211
2024-01-12 00:00:00
cvelist
cvelist
CVE-2023-31211 Disabled automation users could still authenticate
2024-01-12 07:49:45
prion
prion
Authentication flaw
2024-01-12 08:15:00
nvd
nvd
CVE-2023-31211
2024-01-12 08:15:43
openvas
openvas
Checkmk < 2.1.0p38, 2.2.x < 2.2.0p18 Multiple Vulnerabilities
2024-01-12 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.6 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
16.2%
Related for CVE-2023-31211