Checkmk Security Vulnerabilities

Checkmk is an editor. A security vulnerability exists in Checkmk versions 2.3.0p7 and 2.2.0p28, which stems from a stored cross-site scripting vulnerability in certain confirmation pop-up windows...

UBUNTU-CVE-2024-28833

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

PT-2024-22601 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.3 through 2.3.0p5 Description: The issue is related to improper restriction of excessive authentication attempts with two factor authentication methods, which facilitates brute-forcing of second factor mechanisms...

UBUNTU-CVE-2024-28826

Improper restriction of local upload and download paths in checksftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 EOL allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server...

Checkmk 安全漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk that stems from an improperly restricted path for local uploads and downloads in the function checksftp, which allows an attacker to read and write to local files on the Checkmk site server. Affected Products and Versions:Checkmk...

CVE-2024-28825 Brute-force protection ineffective for some login methods

Improper restriction of excessive authentication attempts on some authentication methods in Checkmk before 2.3.0b5 beta, 2.2.0p26, 2.1.0p43, and in Checkmk 2.0.0 EOL facilitates password brute-forcing...

Checkmk 安全漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk versions 2.3.0, 2.2.0, 2.1.0, and 2.0.0, which stems from the fact that login attempts via the REST API and basic authentication do not count against the lockout mechanism, and which can be exploited by an attacker to attempt to bru...

CVE-2024-3367 Argument injection to runmqsc

Argument injection in webspheremq agent plugin in Checkmk 2.0.0, 2.1.0, 2.2.0p26 and 2.3.0b5 allows local attacker to inject one argument to runmqsc...

The vulnerability of the Checkmk monitoring software for IT infrastructure allows a hacker to increase their privileges.

The vulnerability of Checkmk, a monitoring software for IT infrastructure, is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

Checkmk 安全漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk versions prior to 2.3.0b4. An attacker exploited the vulnerability to perform a cross-site scripting attack...

Checkmk 安全漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk versions prior to 2.3.0b4 beta, 2.2.0p24, 2.1.0p41, and 2.0.0 EOL, which stems from a call to a sqlplus command on the agent plugin mkoracle Checkmk command line that contains sensitive information, allowing a list of this informati...

Checkmk Permission License and Access Control Issues Vulnerability

Checkmk is an editor. A security vulnerability exists in Checkmk that stems from the presence of an elevation of privilege vulnerability that allows local users to escalate privileges. Affected products and versions: Checkmk versions prior to 2.2.0p23, prior to 2.1.0p40, prior to 2.0.0 EOL...

CVE-2023-6735 Privilege escalation in mk_tsm

Privilege escalation in mktsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges...

CVE-2023-31211 Disabled automation users could still authenticate

Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials...

PT-2024-12262 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.2.0p17 Checkmk versions prior to 2.1.0p37 Checkmk versions prior to 2.0.0p39 Description: The issue is related to an insufficient authentication flow, allowing an attacker to utilize locked credentials...

CVE-2023-31210 Privilege escalation in agent via LD_LIBRARY_PATH

Usage of user controlled LDLIBRARYPATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries...

UBUNTU-CVE-2023-6157

Improper neutralization of livestatus command delimiters in ajaxsearch in Checkmk = 2.0.0p39, 2.1.0p37, and 2.2.0p15 allows arbitrary livestatus command execution for authorized users...

Checkmk Security Vulnerabilities

Checkmk is an editor. Checkmk suffers from a security vulnerability that stems from incorrect neutralization of the livestatus command separator. An attacker can exploit this vulnerability to execute arbitrary livestatus commands...

PT-2023-19031 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.2.0p15 Checkmk versions prior to 2.1.0p37 Checkmk versions prior to 2.0.0p40 Description: The issue is related to improper input validation, allowing privileged attackers to cause a partial denial of service of the...

UBUNTU-CVE-2023-31208

Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk 2.0.0p36, 2.1.0p28, and 2.2.0b8 beta allows arbitrary livestatus command execution for authorized users...