Lucene search
K

1445 matches found

CVE
CVE
added 2024/01/12 7:50 a.m.44 views

CVE-2023-6740

CVE-2023-6740 affects Checkmk via a privilege escalation in the jar_signature agent plugin. The vulnerability allows a local user to escalate privileges in Checkmk installations using vulnerable plugin versions. Affected products/versions are Checkmk before 2.2.0p18, before 2.1.0p38, and before 2...

8.8CVSS7.8AI score0.0018EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2024/01/12 7:50 a.m.27 views

CVE-2023-6740 Privilege escalation in jar_signature

Privilege escalation in jarsignature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges...

8.8CVSS9.1AI score0.0018EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/12 7:50 a.m.23 views

CVE-2023-6735 Privilege escalation in mk_tsm

Privilege escalation in mktsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges...

8.8CVSS9.1AI score0.00276EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/01/12 7:50 a.m.5 views

CVE-2023-6735 Privilege escalation in mk_tsm

Privilege escalation in mktsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges...

8.8CVSS8.8AI score0.00276EPSS
Exploits0References1
CVE
CVE
added 2024/01/12 7:50 a.m.44 views

CVE-2023-6735

CVE-2023-6735 affects the Checkmk mk_tsm agent plugin. A local user can escalate privileges in affected releases. Vulnerable versions are Checkmk before 2.2.0p18, before 2.1.0p38, and before 2.0.0p39. The issue is a local privilege escalation; exploitation status is not detailed in the provided d...

8.8CVSS7.8AI score0.00276EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2024/01/12 7:49 a.m.63 views

CVE-2023-31211

Summary of CVE-2023-31211 (Checkmk) : The issue is an insufficient authentication flow in Checkmk versions before 2.2.0p18, 2.1.0p38 and 2.0.0p39 that allows an attacker to use locked credentials, potentially enabling unauthorized access or impact on security controls. The root cause is authentic...

8.8CVSS6.6AI score0.00507EPSS
Exploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2024/01/12 7:49 a.m.2 views

CVE-2023-31211 Disabled automation users could still authenticate

Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials...

8.8CVSS7.3AI score0.00507EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/12 7:49 a.m.16 views

CVE-2023-31211 Disabled automation users could still authenticate

Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials...

8.8CVSS9AI score0.00507EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/01/12 12:0 a.m.3 views

PT-2024-15067 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.2.0p18 Checkmk versions prior to 2.1.0p38 Checkmk versions prior to 2.0.0p39 Description: The issue allows a local user to escalate privileges in the mk tsm agent plugin. This is a privilege escalation issue that...

8.8CVSS7.5AI score0.00276EPSS
Exploits0References8
UbuntuCve
UbuntuCve
added 2024/01/12 12:0 a.m.22 views

CVE-2023-6740

Privilege escalation in jarsignature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges...

8.8CVSS7.1AI score0.0018EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2024/01/12 12:0 a.m.14 views

CVE-2023-6735

Privilege escalation in mktsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges...

8.8CVSS7.1AI score0.00276EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/01/12 12:0 a.m.5 views

PT-2024-12262 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.2.0p17 Checkmk versions prior to 2.1.0p37 Checkmk versions prior to 2.0.0p39 Description: The issue is related to an insufficient authentication flow, allowing an attacker to utilize locked credentials...

8.8CVSS7.3AI score0.00507EPSS
Exploits0References9
UbuntuCve
UbuntuCve
added 2024/01/12 12:0 a.m.19 views

CVE-2023-31211

Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials...

8.8CVSS6.6AI score0.00507EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/12 12:0 a.m.3 views

Checkmk Security Vulnerabilities

Checkmk is an editor. A security vulnerability exists in Checkmk versions 2.2.0p18, 2.1.0p38, and 2.0.0p39, which stems from an inadequate authentication process...

8.8CVSS7AI score0.00507EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/12 12:0 a.m.4 views

Checkmk Security Vulnerabilities

Checkmk is an editor. A security vulnerability exists in Checkmk versions 2.2.0p18, 2.1.0p38, and 2.0.0p39. An attacker can escalate privileges by exploiting this vulnerability...

8.8CVSS7AI score0.0018EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/01/12 12:0 a.m.4 views

PT-2024-15070 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.2.0p18 Checkmk versions prior to 2.1.0p38 Checkmk versions prior to 2.0.0p39 Description: The issue allows a local user to escalate privileges due to a problem in the jar signature agent plugin. Recommendations: Fo...

8.8CVSS7.2AI score0.0018EPSS
Exploits0References8
OpenVAS
OpenVAS
added 2024/01/12 12:0 a.m.15 views

Checkmk < 2.1.0p38, 2.2.x < 2.2.0p18 Multiple Vulnerabilities

Checkmk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:checkmk:checkmk"; if description...

8.8CVSS8.2AI score0.00507EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/01/12 12:0 a.m.3 views

Checkmk Security Vulnerabilities

Checkmk is an editor. A security vulnerability exists in Checkmk versions 2.2.0p18, 2.1.0p38, and 2.0.0p39. An attacker can escalate privileges by exploiting this vulnerability...

8.8CVSS7AI score0.00276EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/12/15 12:0 a.m.25 views

Checkmk 2.2.0p10 < 2.2.0p17 Privilege Escalation Vulnerability

Checkmk is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:checkmk:checkmk"; if...

8.8CVSS7.2AI score0.00536EPSS
Exploits0References1
OSV
OSV
added 2023/12/13 9:15 a.m.11 views

CVE-2023-31210

Usage of user controlled LDLIBRARYPATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries...

7.8CVSS7.1AI score
Exploits0References1
Rows per page
Query Builder