Lucene search
+L

1766 matches found

OSV
OSV
•added 2024/07/10 12:41 p.m.•19 views

CVE-2024-28828 1-Click compromize via CSRF

Cross-Site request forgery in Checkmk 2.3.0p8, 2.2.0p29, 2.1.0p45, and = 2.0.0p39 EOL could lead to 1-click compromize of the site...

8.8CVSS5.9AI score
SaveExploits0References3
Mend
Mend
•added 2024/07/10 12:41 p.m.•2 views

CVE-2024-28828

Cross-Site request forgery in Checkmk 2.3.0p8, 2.2.0p29, 2.1.0p45, and = 2.0.0p39 EOL could lead to 1-click compromize of the site...

8.8CVSS0.00249EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/07/10 12:41 p.m.•21 views

CVE-2024-28828 1-Click compromize via CSRF

Cross-Site request forgery in Checkmk 2.3.0p8, 2.2.0p29, 2.1.0p45, and = 2.0.0p39 EOL could lead to 1-click compromize of the site...

8.8CVSS6.8AI score0.00249EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/10 12:41 p.m.•40 views

CVE-2024-28828 1-Click compromize via CSRF

Cross-Site request forgery in Checkmk 2.3.0p8, 2.2.0p29, 2.1.0p45, and = 2.0.0p39 EOL could lead to 1-click compromize of the site...

8.8CVSS0.00249EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/10 12:41 p.m.•72 views

CVE-2024-28828

CVE-2024-28828 applies to Checkmk: CSRF vulnerability could allow 1-click site compromise in affected builds before 2.3.0p8, before 2.2.0p29, before 2.1.0p45, and

8.8CVSS8.6AI score0.00249EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/10 12:41 p.m.•42 views

CVE-2024-28827 Privilege escalation in Windows agent

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk 2.3.0p8, 2.2.0p29, 2.1.0p45, and = 2.0.0p39 EOL allows a local attacker to gain SYSTEM privileges...

8.8CVSS6.8AI score0.00169EPSS
SaveExploits0References1
Mend
Mend
•added 2024/07/10 12:41 p.m.•2 views

CVE-2024-28827

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk 2.3.0p8, 2.2.0p29, 2.1.0p45, and = 2.0.0p39 EOL allows a local attacker to gain SYSTEM privileges...

9.3CVSS0.00169EPSS
SaveExploits0References3
CVE
CVE
•added 2024/07/10 12:41 p.m.•119 views

CVE-2024-28827

The CVE-2024-28827 issue is a local privilege escalation in Checkmk Windows Agent caused by incorrect permissions on the agent’s data directory. Affected: Checkmk Windows Agent data directory in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and

8.8CVSS8.6AI score0.00169EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/07/10 12:41 p.m.•72 views

CVE-2024-28827 Privilege escalation in Windows agent

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk 2.3.0p8, 2.2.0p29, 2.1.0p45, and = 2.0.0p39 EOL allows a local attacker to gain SYSTEM privileges...

8.8CVSS0.00169EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/10 12:41 p.m.•21 views

CVE-2024-28827 Privilege escalation in Windows agent

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk 2.3.0p8, 2.2.0p29, 2.1.0p45, and = 2.0.0p39 EOL allows a local attacker to gain SYSTEM privileges...

8.8CVSS6AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2024/07/10 12:00 a.m.•18 views

Checkmk Security Vulnerabilities

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk that stems from incorrect permissions on the data directory, causing a local attacker to gain SYSTEM privileges...

8.8CVSS6.8AI score0.00169EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/10 12:00 a.m.•20 views

PT-2024-22596 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.3.0p8 Checkmk versions 2.2.0p29 Checkmk versions 2.1.0p45 Checkmk versions = 2.0.0p39 Description: Cross-Site request forgery in Checkmk could lead to 1-click compromise of the site. Recommendations: For Checkmk versions...

8.8CVSS7.1AI score0.00249EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/10 12:00 a.m.•4 views

CVE-2024-28828: Cross-Site Request Forgery (CSRF)

Cross-Site request forgery in Checkmk 2.3.0p8, 2.2.0p29, 2.1.0p45, and = 2.0.0p39 EOL could lead to 1-click compromize of the site...

8.8CVSS5.8AI score0.00249EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/10 12:00 a.m.•9 views

CVE-2024-28827: Incorrect Permission Assignment for Critical Resource

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk 2.3.0p8, 2.2.0p29, 2.1.0p45, and = 2.0.0p39 EOL allows a local attacker to gain SYSTEM privileges...

8.8CVSS5.8AI score0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/10 12:00 a.m.•16 views

Checkmk Security Vulnerabilities

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk that stems from the presence of cross-site request forgery, which could lead to a one-click site compromise...

8.8CVSS6.5AI score0.00249EPSS
SaveExploits0References2
NVD
NVD
•added 2024/07/08 1:15 p.m.•51 views

CVE-2024-6163

Certain http endpoints of Checkmk in Checkmk 2.3.0p10 2.2.0p31, 2.1.0p46, = 2.0.0p39 allows remote attacker to bypass authentication and access data...

9.8CVSS0.00525EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/07/08 1:15 p.m.•31 views

CVE-2024-6163

Certain http endpoints of Checkmk in Checkmk 2.3.0p10 2.2.0p31, 2.1.0p46, = 2.0.0p39 allows remote attacker to bypass authentication and access data...

9.8CVSS5.9AI score0.00525EPSS
SaveExploits0References2
OSV
OSV
•added 2024/07/08 1:15 p.m.•36 views

UBUNTU-CVE-2024-6163

Certain http endpoints of Checkmk in Checkmk 2.3.0p10 2.2.0p31, 2.1.0p46, = 2.0.0p39 allows remote attacker to bypass authentication and access data...

9.8CVSS5.8AI score0.00525EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/07/08 1:01 p.m.•14 views

CVE-2024-6163 local IP restriction of internal HTTP endpoints

Certain http endpoints of Checkmk in Checkmk 2.3.0p10 2.2.0p31, 2.1.0p46, = 2.0.0p39 allows remote attacker to bypass authentication and access data...

5.3CVSS7.2AI score0.00525EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/08 1:01 p.m.•43 views

CVE-2024-6163 local IP restriction of internal HTTP endpoints

Certain http endpoints of Checkmk in Checkmk 2.3.0p10 2.2.0p31, 2.1.0p46, = 2.0.0p39 allows remote attacker to bypass authentication and access data...

5.3CVSS0.00525EPSS
SaveExploits0References1
Rows per page
Query Builder