tribe29 Checkmk Security Vulnerabilities

tribe29 Checkmk is an application from the German company tribe29. It provides a comprehensive solution for monitoring applications, servers and networks. A security vulnerability exists in the tribe29 Checkmk Appliance versions prior to 1.6.8. An attacker exploited the vulnerability to retrieve...

PT-2023-32591 · Tribe29 · Tribe29 Checkmk Appliance

Name of the Vulnerable Software and Affected Versions: Tribe29 Checkmk Appliance versions prior to 1.6.8 Description: The issue allows a local attacker to expose sensitive data by retrieving passwords via reading log files. This is possible due to a sensitive data exposure in Webconf...

CVE-2023-22318

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...

Denial of service

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...

CVE-2023-22318

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...

UBUNTU-CVE-2023-22318

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...

CVE-2023-22318

CVE-2023-22318 affects Tribe29 Checkmk Appliance prior to version 1.6.5, with a Denial of Service in Webconf. The vulnerability is described across multiple sources as a Webconf-related issue that can impact availability, with CVSS 3.1 base score 7.5 (HIGH) and an attack vector over the network w...

CVE-2023-22318 Denial of service against webconf

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...

CVE-2023-22318 Denial of service against webconf

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...

CVE-2023-22309

Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4...

CVE-2022-46302

Broad access controls could allow site users to directly interact with the system Apache installation when providing the reverse proxy configurations for Tribe29's Checkmk = 2.1.0p6, Checkmk = 2.0.0p27, and all versions of Checkmk 1.6.0 EOL allowing an attacker to perform remote code execution wi...

CVE-2023-22309

Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4...

Cross site scripting

Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4...

Remote code execution

Broad access controls could allow site users to directly interact with the system Apache installation when providing the reverse proxy configurations for Tribe29's Checkmk = 2.1.0p6, Checkmk = 2.0.0p27, and all versions of Checkmk 1.6.0 EOL allowing an attacker to perform remote code execution wi...

CVE-2022-46302 Remote Code Execution with Root Privileges via Broad Apache Permissions

Broad access controls could allow site users to directly interact with the system Apache installation when providing the reverse proxy configurations for Tribe29's Checkmk = 2.1.0p6, Checkmk = 2.0.0p27, and all versions of Checkmk 1.6.0 EOL allowing an attacker to perform remote code execution wi...

CVE-2022-46302

CVE-2022-46302 affects Tribe29 Checkmk installations prior to patched versions: Checkmk <= 2.1.0p6, Checkmk

CVE-2023-22309 Reflected Cross Site Scripting (XSS)

Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4...

CVE-2023-22309 Reflected Cross Site Scripting (XSS)

Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4...

CVE-2023-22309

CVE-2023-22309 describes a reflective XSS in Webconf of the Tribe29 Checkmk Appliance prior to version 1.6.4. The issue stems from inadequate input filtering/escaping in Webconf, enabling a crafted payload to impact web pages. Affected product: Tribe29 Checkmk Appliance (Webconf component); affec...

PT-2023-18417 · Tribe29 · Tribe29 Checkmk Appliance

Name of the Vulnerable Software and Affected Versions: Tribe29 Checkmk Appliance versions prior to 1.6.4 Description: The issue is related to Reflective Cross-Site-Scripting in Webconf. Recommendations: For versions prior to 1.6.4, update to version 1.6.4 or later to resolve the issue...