CVE-2022-47909

CVE-2022-47909 – LQL injection in Checkmk AuthUser header . The vulnerability affects Tribe29 Checkmk ≤ 2.1.0p11, Checkmk ≤ 2.0.0p28, and all Checkmk 1.6.0 (EOL). It stems from a Livestatus Query Language (LQL) injection in the AuthUser HTTP query header, which allows an attacker to perform direc...

CVE-2022-47909 LQL Injection in Livestatus HTTP headers

Livestatus Query Language LQL injection in the AuthUser HTTP query header of Tribe29's Checkmk = 2.1.0p11, Checkmk = 2.0.0p28, and all versions of Checkmk 1.6.0 EOL allows an attacker to perform direct queries to the application's core from localhost...

CVE-2022-46836 PHP code injection in watolib

PHP code injection in watolib auth.php and hosttags.php in Tribe29's Checkmk = 2.1.0p10, Checkmk = 2.0.0p27, and Checkmk = 1.6.0p29 allows an attacker to inject and execute PHP code which will be executed upon request of the vulnerable component...

CVE-2022-46836

CVE-2022-46836 affects Tribe29 Checkmk; PHP code injection is possible in watolib auth.php and hosttags.php in Checkmk versions <= 2.1.0p10, <= 2.0.0p27, and

CVE-2022-46303 Command injection in SMS notifications

Command injection in SMS notifications in Tribe29 Checkmk = 2.1.0p10, Checkmk = 2.0.0p27, and Checkmk = 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local...

CVE-2022-46303 Command injection in SMS notifications

Command injection in SMS notifications in Tribe29 Checkmk = 2.1.0p10, Checkmk = 2.0.0p27, and Checkmk = 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local...

CVE-2022-46303

CVE-2022-46303 documents a command injection in SMS notifications for Tribe29 Checkmk prior to versions 2.1.0p10, 2.0.0p27, and 1.6.0p29. Affected by a vulnerability that allows an attacker with User Management permissions (and, in some scenarios, LDAP administrators) to run arbitrary commands wi...

Checkmk 日志信息泄露漏洞

Checkmk is an editor. A security vulnerability exists in Tribe29 Checkmk version 2.1.0p13 and earlier, version 2.0.0p29 and earlier, and version 1.6.0. An attacker can exploit the vulnerability to update the program log file...

UBUNTU-CVE-2022-43440

Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29 on a Checkmk server allows the site user to escalate privileges via a manipulated unixcat executable...

CVE-2022-43440

CVE-2022-43440 affects Checkmk: Uncontrolled Search Path Element in Checkmk Agent allows a local attacker to escalate privileges by manipulating the unixcat executable. Impacts Checkmk server deployments with vulnerable Agent/orchestrations prior to 2.1.0p1, 2.0.0p25, or 1.6.0p29. Root cause is a...

CVE-2023-0284

Improper Input Validation of LDAP user IDs in Tribe29 Checkmk allows attackers that can control LDAP user IDs to manipulate files on the server. Checkmk = 2.1.0p19, Checkmk = 2.0.0p32, and all versions of Checkmk 1.6.0 EOL are affected...

CVE-2023-0284

Improper Input Validation of LDAP user IDs in Tribe29 Checkmk allows attackers that can control LDAP user IDs to manipulate files on the server. Checkmk = 2.1.0p19, Checkmk = 2.0.0p32, and all versions of Checkmk 1.6.0 EOL are affected...

UBUNTU-CVE-2023-0284

Improper Input Validation of LDAP user IDs in Tribe29 Checkmk allows attackers that can control LDAP user IDs to manipulate files on the server. Checkmk = 2.1.0p19, Checkmk = 2.0.0p32, and all versions of Checkmk 1.6.0 EOL are affected...

CVE-2023-0284 Improper validation of LDAP user IDs

Improper Input Validation of LDAP user IDs in Tribe29 Checkmk allows attackers that can control LDAP user IDs to manipulate files on the server. Checkmk = 2.1.0p19, Checkmk = 2.0.0p32, and all versions of Checkmk 1.6.0 EOL are affected...

CVE-2022-4884

Path-Traversal in MKP storing in Tribe29 Checkmk =2.0.0p32 and = 2.1.0p18 allows an administrator to write mkp files to arbitrary locations via a malicious mkp file...

UBUNTU-CVE-2022-4884

Path-Traversal in MKP storing in Tribe29 Checkmk =2.0.0p32 and = 2.1.0p18 allows an administrator to write mkp files to arbitrary locations via a malicious mkp file...

Path traversal

Path-Traversal in MKP storing in Tribe29 Checkmk =2.0.0p32 and = 2.1.0p18 allows an administrator to write mkp files to arbitrary locations via a malicious mkp file...

CVE-2022-4884

CVE-2022-4884 describes a path-traversal in MKP storing in Tribe29 Checkmk. Vulnerable are Checkmk MKP handling components prior to checks in versions up to 2.0.0p32 and 2.1.0p18, where a malicious mkp file can cause an administrator to write mkp files to arbitrary locations. The vulnerability is...

CVE-2022-4884 Path-Traversal in MKP storing

Path-Traversal in MKP storing in Tribe29 Checkmk =2.0.0p32 and = 2.1.0p18 allows an administrator to write mkp files to arbitrary locations via a malicious mkp file...

Checkmk 路径遍历漏洞

Checkmk is an editor. A security vulnerability exists in Tribe29 Checkmk versions prior to 2.0.0p33 and 2.1.x versions prior to 2.1.0p19, which stems from a path traversal in MKP storing that allows administrators to write mkp files to arbitrary locations via a malicious mkp file...