Lucene search

GoogleOSV:CVE-2022-48317

HistoryFeb 20, 2023 - 5:15 p.m.

CVE-2022-48317

2023-02-2017:15:12

Google

osv.dev

cve-2022-48317

expired sessions

restapi

tribe29

checkmk

security vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

Expired sessions were not securely terminated in the RestAPI for Tribe29’s Checkmk <= 2.1.0p10 and Checkmk <= 2.0.0p28 allowing an attacker to use expired session tokens when communicating with the RestAPI.

CPENameOperatorVersion
checkmkeq2.0.0b3
checkmkeq1.1.5i0
checkmkeq1.1.6
checkmkeq1.2.0b1
checkmkeq2.0.0b5
checkmkeq1.2.1i3
checkmkeq1.2.5i6
checkmkeq2.1.0b9
checkmkeq1.2.7i3
checkmkeq1.1.8b1

Name	Operator	Version
checkmk	eq	2.0.0b3
checkmk	eq	1.1.5i0
checkmk	eq	1.1.6
checkmk	eq	1.2.0b1
checkmk	eq	2.0.0b5
checkmk	eq	1.2.1i3
checkmk	eq	1.2.5i6
checkmk	eq	2.1.0b9
checkmk	eq	1.2.7i3
checkmk	eq	1.1.8b1

Rows per page:

1-10 of 1011

References

checkmk.com/werk/14485

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

Related for OSV:CVE-2022-48317