84 matches found
CVE-2022-48321
Limited Server-Side Request Forgery SSRF in agent-receiver in Tribe29's Checkmk = 2.1.0p11 allows an attacker to communicate with local network restricted endpoints by use of the host registration API...
CVE-2022-48320
Cross-site Request Forgery CSRF in Tribe29's Checkmk = 2.1.0p17, Checkmk = 2.0.0p31, and all versions of Checkmk 1.6.0 EOL allow an attacker to add new visual elements to multiple pages...
CVE-2022-43440
Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29 on a Checkmk server allows the site user to escalate privileges via a manipulated unixcat executable...
CVE-2022-46836
PHP code injection in watolib auth.php and hosttags.php in Tribe29's Checkmk = 2.1.0p10, Checkmk = 2.0.0p27, and Checkmk = 1.6.0p29 allows an attacker to inject and execute PHP code which will be executed upon request of the vulnerable component...
CVE-2022-46303
Command injection in SMS notifications in Tribe29 Checkmk = 2.1.0p10, Checkmk = 2.0.0p27, and Checkmk = 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local...
CVE-2023-6287
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files...
CVE-2023-6287
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files...
CVE-2023-6287
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files...
Code injection
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files...
CVE-2023-6287 Backup password in GET parameter
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files...
CVE-2023-6287
The CVE-2023-6287 entry concerns Tribe29 Checkmk Appliance (Webconf) prior to version 1.6.8. The vulnerability allows a local attacker to retrieve passwords by reading log files due to a sensitive data exposure in Webconf. Affected software: Tribe29 Checkmk Appliance before 1.6.8. Root cause: imp...
CVE-2023-22318
Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...
CVE-2023-22318
Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...
CVE-2023-22318 Denial of service against webconf
Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...
CVE-2023-22318 Denial of service against webconf
Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...
CVE-2023-22318
CVE-2023-22318 affects Tribe29 Checkmk Appliance prior to version 1.6.5, with a Denial of Service in Webconf. The vulnerability is described across multiple sources as a Webconf-related issue that can impact availability, with CVSS 3.1 base score 7.5 (HIGH) and an attack vector over the network w...
CVE-2023-22309
Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4...
CVE-2023-22309
Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4...
CVE-2022-46302
Broad access controls could allow site users to directly interact with the system Apache installation when providing the reverse proxy configurations for Tribe29's Checkmk = 2.1.0p6, Checkmk = 2.0.0p27, and all versions of Checkmk 1.6.0 EOL allowing an attacker to perform remote code execution wi...