Lucene search
K

1445 matches found

CNNVD
CNNVD
added 2023/04/18 12:0 a.m.4 views

Checkmk 安全漏洞

Checkmk is an editor. An information disclosure vulnerability exists in the Checkmk Appliance that stems from inadequate protection of sensitive information in Webconf. An attacker could exploit the vulnerability by reading log files to retrieve passwords...

5.5CVSS6.2AI score0.00221EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/04/18 12:0 a.m.13 views

Checkmk 2.1.x < 2.1.0p27 Improper Permission Handling Vulnerability

Checkmk is prone to an improper permission handling vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.3CVSS5.4AI score0.00402EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/04/18 12:0 a.m.4 views

PT-2023-18404 · Tribe29 · Tribe29 Checkmk Appliance

Name of the Vulnerable Software and Affected Versions: Tribe29 Checkmk Appliance versions prior to 1.6.4 Description: The issue allows authenticated site users to escalate privileges due to incorrectly set permissions. Recommendations: For versions prior to 1.6.4, update to version 1.6.4 or later...

8.8CVSS8.7AI score0.00678EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2023/04/05 12:0 a.m.15 views

Checkmk < 2.0.0p35, 2.1.x < 2.1.0p26 Error Handling Vulnerability

Checkmk is prone to an inappropriate error handling vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.3CVSS5.9AI score0.00913EPSS
Exploits0References1
NVD
NVD
added 2023/04/04 7:15 a.m.13 views

CVE-2023-1768

Inappropriate error handling in Tribe29 Checkmk = 2.1.0p25, = 2.0.0p34, = 2.2.0b3 beta, and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations...

5.3CVSS4.7AI score0.00913EPSS
Exploits0References1
OSV
OSV
added 2023/04/04 7:15 a.m.14 views

CVE-2023-1768

Inappropriate error handling in Tribe29 Checkmk = 2.1.0p25, = 2.0.0p34, = 2.2.0b3 beta, and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations...

5.3CVSS7AI score
Exploits0References1
OSV
OSV
added 2023/04/04 7:15 a.m.6 views

UBUNTU-CVE-2023-1768

Inappropriate error handling in Tribe29 Checkmk = 2.1.0p25, = 2.0.0p34, = 2.2.0b3 beta, and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations...

5.3CVSS5.8AI score0.00913EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2023/04/04 7:15 a.m.27 views

CVE-2023-1768

Inappropriate error handling in Tribe29 Checkmk = 2.1.0p25, = 2.0.0p34, = 2.2.0b3 beta, and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations...

5.3CVSS6.1AI score0.00913EPSS
Exploits0References2
Prion
Prion
added 2023/04/04 7:15 a.m.15 views

Code injection

Inappropriate error handling in Tribe29 Checkmk = 2.1.0p25, = 2.0.0p34, = 2.2.0b3 beta, and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations...

5CVSS5.2AI score0.00913EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/04 6:30 a.m.16 views

CVE-2023-1768 Symmetric agent data encryption fails silently

Inappropriate error handling in Tribe29 Checkmk = 2.1.0p25, = 2.0.0p34, = 2.2.0b3 beta, and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations...

3.7CVSS5.5AI score0.00913EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/04/04 6:30 a.m.6 views

CVE-2023-1768 Symmetric agent data encryption fails silently

Inappropriate error handling in Tribe29 Checkmk = 2.1.0p25, = 2.0.0p34, = 2.2.0b3 beta, and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations...

3.7CVSS5.2AI score0.00913EPSS
Exploits0References1
CVE
CVE
added 2023/04/04 6:30 a.m.42 views

CVE-2023-1768

CVE-2023-1768: In Checkmk, inappropriate error handling in Tribe29 components causes symmetric encryption of agent data to fail silently, leading to plaintext transmission in certain configurations. Affected are Checkmk versions &lt;= 2.1.0p25, &lt;= 2.0.0p34,

5.3CVSS4.7AI score0.00913EPSS
Exploits0References1Affected Software2
CNNVD
CNNVD
added 2023/04/04 12:0 a.m.5 views

Checkmk 安全漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk that stems from an error mishandling that causes symmetric encryption of proxy data to fail and transmit data in plaintext. The following products and versions are affected: Tribe29 Checkmk 2.1.0p25 and earlier, 2.0.0p34 and earlier...

5.3CVSS5.7AI score0.00913EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/04/04 12:0 a.m.5 views

PT-2023-17228 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 1.6.0 and earlier Checkmk versions 2.0.0 through 2.0.0p34 Checkmk versions 2.1.0 through 2.1.0p25 Checkmk versions 2.2.0b3 and earlier Description: Inappropriate error handling in Checkmk causes the symmetric encryption of...

5.3CVSS5.5AI score0.00913EPSS
Exploits0References7
GithubExploit
GithubExploit
added 2023/03/27 10:30 p.m.409 views

Exploit for Improper Input Validation in Checkmk

CVE-2022-46836 - Remote Code Execution This exploit abuses an...

9.1CVSS9.7AI score0.01126EPSS
Exploits2
GithubExploit
GithubExploit
added 2023/03/27 2:16 a.m.207 views

Exploit for Improper Input Validation in Checkmk

CVE-2022-47909 - Unauthenticated Arbitrary File Deletion This...

7.8CVSS6.3AI score0.00392EPSS
Exploits3
OpenVAS
OpenVAS
added 2023/03/21 12:0 a.m.24 views

Checkmk 2.0.x < 2.0.0p35, 2.1.x < 2.1.0p25 HTML Injection Vulnerability

Checkmk is prone to an HTML injection vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:checkmk:checkmk"; if...

5.4CVSS5.9AI score0.00399EPSS
Exploits0References1
NVD
NVD
added 2023/03/20 4:15 p.m.28 views

CVE-2023-22288

HTML Email Injection in Tribe29 Checkmk =2.1.0p23; =2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails...

5.4CVSS4.9AI score0.00399EPSS
Exploits0References1
OSV
OSV
added 2023/03/20 4:15 p.m.13 views

CVE-2023-22288

HTML Email Injection in Tribe29 Checkmk =2.1.0p23; =2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails...

5.4CVSS7.1AI score0.00399EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2023/03/20 4:15 p.m.12 views

CVE-2023-22288

HTML Email Injection in Tribe29 Checkmk =2.1.0p23; =2.0.0p34, and all versions of Checkmk 1.6.0 allows an authenticated attacker to inject malicious HTML into Emails...

5.4CVSS6.1AI score0.00399EPSS
Exploits0References2
Rows per page
Query Builder