Lucene search
K

1445 matches found

CNNVD
CNNVD
added 2024/06/17 12:0 a.m.2 views

Checkmk Security Vulnerabilities

Checkmk is an editor. A security vulnerability exists in Checkmk. An attacker exploited the vulnerability to perform a cross-site scripting attack...

6.5CVSS6.2AI score0.00283EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/06/17 12:0 a.m.3 views

PT-2024-37115 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0p7 Checkmk versions prior to 2.2.0p28 Checkmk versions prior to 2.1.0p45 Checkmk version 2.0.0 Description: The issue is related to stored XSS in inventory tree rendering. Recommendations: For versions prior to...

6.5CVSS6AI score0.00283EPSS
Exploits0References8
OSV
OSV
added 2024/06/10 12:15 p.m.9 views

CVE-2024-28833

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

7.5CVSS7.4AI score
Exploits0References1
NVD
NVD
added 2024/06/10 12:15 p.m.30 views

CVE-2024-28833

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

7.5CVSS0.00392EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/06/10 12:15 p.m.23 views

CVE-2024-28833

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

7.5CVSS5.8AI score0.00392EPSS
Exploits0References2
OSV
OSV
added 2024/06/10 12:15 p.m.1 views

UBUNTU-CVE-2024-28833

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

7.5CVSS5.8AI score0.00392EPSS
Exploits0References3
CVE
CVE
added 2024/06/10 11:55 a.m.62 views

CVE-2024-28833

CVE-2024-28833 affects Checkmk 2.3 prior to 2.3.0p6, where excessive authentication attempts for two-factor authentication are not properly restricted, enabling brute-forcing of second factor mechanisms. The vulnerability is tied to the authentication flow and could impact confidentiality due to ...

7.5CVSS6.4AI score0.00392EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/10 11:55 a.m.15 views

CVE-2024-28833 Missing brute-force protection for two factor authentication

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

5.9CVSS7.2AI score0.00392EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/10 11:55 a.m.32 views

CVE-2024-28833 Missing brute-force protection for two factor authentication

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

5.9CVSS0.00392EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/06/10 12:0 a.m.4 views

PT-2024-22601 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.3 through 2.3.0p5 Description: The issue is related to improper restriction of excessive authentication attempts with two factor authentication methods, which facilitates brute-forcing of second factor mechanisms...

7.5CVSS7.4AI score0.00392EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/06/10 12:0 a.m.4 views

Checkmk Security Vulnerabilities

Checkmk is an editor. A security vulnerability exists in versions prior to Checkmk 2.3.0p6 that stems from improperly limiting excessive authentication attempts for the two-factor authentication method, which can lead to brute force cracking...

7.5CVSS6.9AI score0.00392EPSS
Exploits0References2
OSV
OSV
added 2024/05/29 10:15 a.m.7 views

CVE-2024-28826

Improper restriction of local upload and download paths in checksftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 EOL allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server...

8.1CVSS6.5AI score
Exploits0References1
NVD
NVD
added 2024/05/29 10:15 a.m.10 views

CVE-2024-28826

Improper restriction of local upload and download paths in checksftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 EOL allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server...

8.8CVSS8.6AI score0.00475EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/05/29 10:15 a.m.18 views

CVE-2024-28826

Improper restriction of local upload and download paths in checksftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 EOL allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server...

8.8CVSS5.8AI score0.00475EPSS
Exploits0References2
OSV
OSV
added 2024/05/29 10:15 a.m.0 views

UBUNTU-CVE-2024-28826

Improper restriction of local upload and download paths in checksftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 EOL allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server...

8.8CVSS5.6AI score0.00475EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/05/29 10:0 a.m.15 views

CVE-2024-28826 Unrestricted upload and download paths in check_sftp

Improper restriction of local upload and download paths in checksftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 EOL allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server...

8.8CVSS6.6AI score0.00475EPSS
Exploits0References1
CVE
CVE
added 2024/05/29 10:0 a.m.50 views

CVE-2024-28826

Summary: CVE-2024-28826 affects Checkmk installations prior to 2.3.0p4, 2.2.0p27, 2.1.0p44, and 2.0.0 (EOL). Root cause: Improper restriction of local upload/download paths in the check_sftp function. Impact: Attackers with sufficient permissions can configure the check to read and write local fi...

8.8CVSS6.4AI score0.00475EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/29 10:0 a.m.16 views

CVE-2024-28826 Unrestricted upload and download paths in check_sftp

Improper restriction of local upload and download paths in checksftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 EOL allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server...

8.8CVSS8.6AI score0.00475EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/29 12:0 a.m.2 views

PT-2024-22594

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.3.0p4 Checkmk versions prior to 2.2.0p27 Checkmk versions prior to 2.1.0p44 Checkmk version 2.0.0 Description The issue is related to improper restriction of local upload and download paths in the check sftp...

8.8CVSS5.4AI score0.00475EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/05/29 12:0 a.m.2 views

Checkmk 安全漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk that stems from an improperly restricted path for local uploads and downloads in the function checksftp, which allows an attacker to read and write to local files on the Checkmk site server. Affected Products and Versions:Checkmk...

8.8CVSS6AI score0.00475EPSS
Exploits0References2
Rows per page
Query Builder