Lucene search
K

1445 matches found

UbuntuCve
UbuntuCve
added 2025/12/18 2:15 p.m.3 views

CVE-2025-65000

SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...

5.3CVSS5.9AI score0.00182EPSS
Exploits0References2
OSV
OSV
added 2025/12/18 2:15 p.m.4 views

UBUNTU-CVE-2025-65000

SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...

5.3CVSS5.8AI score0.00182EPSS
Exploits0References3
CVE
CVE
added 2025/12/18 2:4 p.m.10 views

CVE-2025-65000

CVE-2025-65000 affects Checkmk (Linux Remote alert handlers rule). SSH private keys were exposed in the HTML source of the rule page for Checkmk 2.3.0 and all versions up to 2.4.0p18, potentially allowing unauthorized triggering of predefined alert handlers on affected hosts. The Red Hat, NVD, Ub...

5.3CVSS6.4AI score0.00182EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/18 2:4 p.m.27 views

CVE-2025-65000 Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule

SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...

2.3CVSS0.00182EPSS
Exploits0References1
NVD
NVD
added 2025/12/18 10:16 a.m.3 views

CVE-2025-64997

Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure...

6.5CVSS0.00209EPSS
Exploits0References1
OSV
OSV
added 2025/12/18 10:16 a.m.3 views

CVE-2025-64997

Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure...

6.5CVSS6.3AI score
Exploits0References1
UbuntuCve
UbuntuCve
added 2025/12/18 10:16 a.m.3 views

CVE-2025-64997

Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure...

6.5CVSS5.9AI score0.00209EPSS
Exploits0References2
OSV
OSV
added 2025/12/18 10:16 a.m.2 views

UBUNTU-CVE-2025-64997

Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure...

6.5CVSS5.8AI score0.00209EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/18 9:11 a.m.3 views

EUVD-2025-204254

Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure...

6.3CVSS5.8AI score0.00209EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/18 9:11 a.m.2 views

CVE-2025-64997 Insufficient permission validation when showing agent information

Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure...

6.3CVSS6AI score0.00209EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/18 9:11 a.m.23 views

CVE-2025-64997 Insufficient permission validation when showing agent information

Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure...

6.3CVSS0.00209EPSS
Exploits0References1
CVE
CVE
added 2025/12/18 9:11 a.m.9 views

CVE-2025-64997

CVE-2025-64997 pertains to Checkmk where insufficient permission validation in REST API endpoints can let low-privileged users view agent information, leading to information disclosure. The issue affects Checkmk versions prior to 2.4.0p17 and prior to 2.3.0p42. The Red Hat, Ubuntu, OSV, CNA/CVE r...

6.5CVSS6AI score0.00209EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.3 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk versions prior to 2.4.0p17 and prior to 2.3.0p42, which stems from insufficient privilege validation and could lead to information disclosure...

6.5CVSS6.2AI score0.00209EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.4 views

PT-2025-52208

Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure...

6.3CVSS6.4AI score0.00209EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.5 views

PT-2025-52229

SSH private keys of the "Remote alert handlers Linux" rule were exposed in the rule page's HTML source in Checkmk = 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed...

2.3CVSS6.8AI score0.00182EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.3 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk version 2.4.0p18 and earlier, which stems from the exposure of an SSH private key in the HTML source code of the rules page, which could lead to the unauthorized triggering of a predefined alert...

5.3CVSS6.5AI score0.00182EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-39665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames. CVE-2025-39665 Note...

6.9CVSS5.8AI score0.00219EPSS
Exploits0References3
NVD
NVD
added 2025/12/03 10:15 a.m.7 views

CVE-2025-39665

User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames...

6.9CVSS0.00219EPSS
Exploits0References2
OSV
OSV
added 2025/12/03 10:15 a.m.4 views

CVE-2025-39665

User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames...

5.3CVSS6.9AI score
Exploits0References2
OSV
OSV
added 2025/12/03 10:15 a.m.2 views

DEBIAN-CVE-2025-39665

User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames...

5.3CVSS5.3AI score0.00219EPSS
Exploits0References1
Rows per page
Query Builder