Lucene search

GoogleOSV:CVE-2022-48318

HistoryFeb 20, 2023 - 5:15 p.m.

CVE-2022-48318

2023-02-2017:15:12

Google

osv.dev

restapi

documentation

tribe29

checkmk

information disclosure

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.3%

JSON

No authorisation controls in the RestAPI documentation for Tribe29’s Checkmk <= 2.1.0p13 and Checkmk <= 2.0.0p29 which may lead to unintended information disclosure through automatically generated user specific tags within Rest API documentation.

CPENameOperatorVersion
checkmkeq2.0.0b3
checkmkeq1.1.5i0
checkmkeq1.1.6
checkmkeq1.2.0b1
checkmkeq2.0.0b5
checkmkeq1.2.1i3
checkmkeq1.2.5i6
checkmkeq2.1.0b9
checkmkeq1.2.7i3
checkmkeq1.1.8b1

Name	Operator	Version
checkmk	eq	2.0.0b3
checkmk	eq	1.1.5i0
checkmk	eq	1.1.6
checkmk	eq	1.2.0b1
checkmk	eq	2.0.0b5
checkmk	eq	1.2.1i3
checkmk	eq	1.2.5i6
checkmk	eq	2.1.0b9
checkmk	eq	1.2.7i3
checkmk	eq	1.1.8b1

Rows per page:

1-10 of 1011

References

checkmk.com/werk/14509

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.3%

JSON

Related for OSV:CVE-2022-48318