Lucene search
HistoryJun 26, 2023 - 7:15 a.m.
CVE-2023-22359
checkmk
user enumeration
authenticated attacker
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.4
Confidence
High
EPSS
0.001
Percentile
17.7%
User enumeration in Checkmk <=2.2.0p4 allows an authenticated attacker to enumerate usernames.
Affected configurations
Node
checkmkcheckmkMatch2.2.0-
ORcheckmkcheckmkMatch2.2.0b1
ORcheckmkcheckmkMatch2.2.0b2
ORcheckmkcheckmkMatch2.2.0b3
ORcheckmkcheckmkMatch2.2.0b4
ORcheckmkcheckmkMatch2.2.0b5
ORcheckmkcheckmkMatch2.2.0b6
ORcheckmkcheckmkMatch2.2.0b7
ORcheckmkcheckmkMatch2.2.0b8
ORcheckmkcheckmkMatch2.2.0i1
ORcheckmkcheckmkMatch2.2.0p1
ORcheckmkcheckmkMatch2.2.0p2
ORcheckmkcheckmkMatch2.2.0p3
ORcheckmkcheckmkMatch2.2.0p4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| checkmk | checkmk | 2.2.0 | cpe:2.3:a:checkmk:checkmk:2.2.0:-:*:*:*:*:*:* |
| checkmk | checkmk | 2.2.0 | cpe:2.3:a:checkmk:checkmk:2.2.0:b1:*:*:*:*:*:* |
| checkmk | checkmk | 2.2.0 | cpe:2.3:a:checkmk:checkmk:2.2.0:b2:*:*:*:*:*:* |
| checkmk | checkmk | 2.2.0 | cpe:2.3:a:checkmk:checkmk:2.2.0:b3:*:*:*:*:*:* |
| checkmk | checkmk | 2.2.0 | cpe:2.3:a:checkmk:checkmk:2.2.0:b4:*:*:*:*:*:* |
| checkmk | checkmk | 2.2.0 | cpe:2.3:a:checkmk:checkmk:2.2.0:b5:*:*:*:*:*:* |
| checkmk | checkmk | 2.2.0 | cpe:2.3:a:checkmk:checkmk:2.2.0:b6:*:*:*:*:*:* |
| checkmk | checkmk | 2.2.0 | cpe:2.3:a:checkmk:checkmk:2.2.0:b7:*:*:*:*:*:* |
| checkmk | checkmk | 2.2.0 | cpe:2.3:a:checkmk:checkmk:2.2.0:b8:*:*:*:*:*:* |
| checkmk | checkmk | 2.2.0 | cpe:2.3:a:checkmk:checkmk:2.2.0:i1:*:*:*:*:*:* |
References
Related
prion
prion
Code injection
2023-06-26 07:15:00
cvelist
cvelist
CVE-2023-22359 User-enumeration in RestAPI
2023-06-26 06:51:24
vulnrichment
vulnrichment
CVE-2023-22359 User-enumeration in RestAPI
2023-06-26 06:51:24
cve
cve
CVE-2023-22359
2023-06-26 07:15:09
openvas
openvas
Checkmk 2.2.x < 2.2.0p5 Information Disclosure Vulnerability
2023-06-27 00:00:00
ubuntucve
ubuntucve
CVE-2023-22359
2023-06-26 00:00:00
osv
osv
CVE-2023-22359
2023-06-26 07:15:09
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.4
Confidence
High
EPSS
0.001
Percentile
17.7%
Related for NVD:CVE-2023-22359