Lucene search
K

1445 matches found

CVE
CVE
added 2024/10/10 7:43 a.m.50 views

CVE-2024-6747

This CVE concerns Checkmk’s mknotifyd information leakage: affected in Checkmk versions before 2.3.0p18, 2.2.0p36, 2.1.0p49 and 2.0.0p39 (EOL). The underlying issue is an information exposure that may allow an attacker to access potentially sensitive data. No exploitation details are provided in ...

7.5CVSS5.5AI score0.00371EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/10 7:43 a.m.16 views

CVE-2024-6747 Information leak in mknotifyd

Information leakage in mknotifyd in Checkmk before 2.3.0p18, 2.2.0p36, 2.1.0p49 and in 2.0.0p39 EOL allows attacker to get potentially sensitive data...

5.3CVSS0.00371EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/10 12:0 a.m.1 views

PT-2024-37843 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0p18 Checkmk versions prior to 2.2.0p36 Checkmk versions prior to 2.1.0p49 Checkmk version 2.0.0p39 Description: Information leakage in mknotifyd allows an attacker to obtain potentially sensitive data. This issu...

7.5CVSS6.9AI score0.00371EPSS
Exploits0References11
CNNVD
CNNVD
added 2024/10/10 12:0 a.m.2 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. Checkmk has a security vulnerability that stems from the presence of an information leak that allows an attacker to access potentially sensitive data...

7.5CVSS6.2AI score0.00371EPSS
Exploits0References2
OSV
OSV
added 2024/09/27 9:15 a.m.1 views

CVE-2024-38861

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4amk through 2.0a...

7.4CVSS5.8AI score0.00186EPSS
Exploits0References1
NVD
NVD
added 2024/09/27 9:15 a.m.23 views

CVE-2024-38861

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4amk through 2.0a...

7.4CVSS0.00186EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/27 8:11 a.m.32 views

CVE-2024-38861 Lack of TLS validation in plugin MikroTik on Checkmk Exchange

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4amk through 2.0a...

4.9CVSS6.9AI score0.00186EPSS
Exploits0References1
CVE
CVE
added 2024/09/27 8:11 a.m.64 views

CVE-2024-38861

The CVE-2024-38861 entry covers an improper certificate validation issue in the Checkmk Exchange MikroTik plugin, enabling potential MitM interception. Affected MikroTik versions are 0.4a_mk–2.0a and 2.0.0–2.5.5. The vulnerability arises from TLS/certificate validation weaknesses in the plugin, n...

7.4CVSS6.5AI score0.00186EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/09/27 8:11 a.m.25 views

CVE-2024-38861 Lack of TLS validation in plugin MikroTik on Checkmk Exchange

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4amk through 2.0a...

4.9CVSS0.00186EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.2 views

Checkmk Exchange plugin MikroTik 安全漏洞

Checkmk Exchange plugin MikroTik is a plugin from Checkmk Inc. A security vulnerability exists in Checkmk Exchange plugin MikroTik versions 2.0.0 through 2.5.5 and 0.4amk through 2.0a, which originates from improper certificate validation and allows an attacker in the position of MitM to intercep...

7.4CVSS6.7AI score0.00186EPSS
Exploits0References2
OSV
OSV
added 2024/09/23 7:15 a.m.13 views

CVE-2024-8606

Bypass of two factor authentication in RestAPI in Checkmk 2.3.0p16 and 2.2.0p34 allows authenticated users to bypass two factor authentication...

8.8CVSS6.8AI score
Exploits0References1
NVD
NVD
added 2024/09/23 7:15 a.m.22 views

CVE-2024-8606

Bypass of two factor authentication in RestAPI in Checkmk 2.3.0p16 and 2.2.0p34 allows authenticated users to bypass two factor authentication...

9.2CVSS0.00446EPSS
Exploits0References1
OSV
OSV
added 2024/09/23 7:15 a.m.0 views

UBUNTU-CVE-2024-8606

Bypass of two factor authentication in RestAPI in Checkmk 2.3.0p16 and 2.2.0p34 allows authenticated users to bypass two factor authentication...

9.2CVSS5.8AI score0.00446EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/09/23 7:1 a.m.27 views

CVE-2024-8606 Fix 2FA bypass via RestAPI

Bypass of two factor authentication in RestAPI in Checkmk 2.3.0p16 and 2.2.0p34 allows authenticated users to bypass two factor authentication...

9.2CVSS0.00446EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/23 7:1 a.m.12 views

CVE-2024-8606 Fix 2FA bypass via RestAPI

Bypass of two factor authentication in RestAPI in Checkmk 2.3.0p16 and 2.2.0p34 allows authenticated users to bypass two factor authentication...

9.2CVSS6.9AI score0.00446EPSS
Exploits0References1
CVE
CVE
added 2024/09/23 7:1 a.m.58 views

CVE-2024-8606

CVE-2024-8606 affects Checkmk, where the RestAPI allows bypassing two-factor authentication in affected versions (Checkmk before 2.3.0p16 and before 2.2.0p34) when accessed by authenticated users. The root cause is a 2FA bypass within the RestAPI. Documented impact is high/critical across confide...

9.2CVSS8.6AI score0.00446EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/09/23 12:0 a.m.4 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk versions prior to 2.3.0p16 and prior to 2.2.0p34, which stems from a two-factor authentication bypass in RestAPI that could allow authenticated users to bypass two-factor authentication...

9.2CVSS6.5AI score0.00446EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/09/23 12:0 a.m.3 views

PT-2024-39127 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0p16 Checkmk versions prior to 2.2.0p34 Description: The issue allows authenticated users to bypass two-factor authentication in the RestAPI of Checkmk. This enables attackers to access the system without providi...

9.2CVSS7.3AI score0.00446EPSS
Exploits0References13
OSV
OSV
added 2024/09/17 2:15 p.m.7 views

CVE-2024-38860

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...

6.1CVSS7AI score
Exploits0References1
NVD
NVD
added 2024/09/17 2:15 p.m.15 views

CVE-2024-38860

Improper neutralization of input in Checkmk before versions 2.3.0p16 and 2.2.0p34 allows attackers to craft malicious links that can facilitate phishing attacks...

6.1CVSS0.00301EPSS
Exploits0References1
Rows per page
Query Builder