CVE-2023-31208 Livestatus command injection in RestAPI

Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk 2.0.0p36, 2.1.0p28, and 2.2.0b8 beta allows arbitrary livestatus command execution for authorized users...

CVE-2023-31208

CVE-2023-31208 affects Checkmk via improper neutralization of livestatus command delimiters in the RestAPI, allowing arbitrary livestatus command execution for authorized users. Affected are Checkmk versions prior to 2.0.0p36, 2.1.0p28, and 2.2.0b8 (beta). The connected Red Hat/OSV/Nessus entries...

CVE-2023-31208 Livestatus command injection in RestAPI

Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk 2.0.0p36, 2.1.0p28, and 2.2.0b8 beta allows arbitrary livestatus command execution for authorized users...

Checkmk 命令注入漏洞

Checkmk is an editor. A security vulnerability in Checkmk versions 2.0.0p36 prior to 2.0.x, 2.1.x prior to 2.1.0p28, and 2.2.x prior to 2.2.0b8, which stems from an improperly neutralized livestatus command delimiter in RestAPI, can be exploited by an attacker to execute arbitrary livestatus...

PT-2023-23231 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.0.0p36 Checkmk versions prior to 2.1.0p28 Checkmk versions prior to 2.2.0b8 Description: The issue is related to the improper neutralization of livestatus command delimiters in the RestAPI, allowing arbitrary...

CVE-2023-22318

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...

CVE-2023-22318

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...

Denial of service

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...

UBUNTU-CVE-2023-22318

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...

CVE-2023-22318

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...

CVE-2023-22318 Denial of service against webconf

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...

CVE-2023-22318 Denial of service against webconf

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5...

CVE-2023-22318

CVE-2023-22318 affects Tribe29 Checkmk Appliance prior to version 1.6.5, with a Denial of Service in Webconf. The vulnerability is described across multiple sources as a Webconf-related issue that can impact availability, with CVSS 3.1 base score 7.5 (HIGH) and an attack vector over the network w...

PT-2023-18426 · Tribe29 · Tribe29 Checkmk Appliance

Name of the Vulnerable Software and Affected Versions: Tribe29 Checkmk Appliance versions prior to 1.6.5 Description: The issue is related to a denial of service in Webconf. Recommendations: For versions prior to 1.6.5, update to version 1.6.5 or later to resolve the issue...

Checkmk 安全漏洞

Checkmk is an editor. A security vulnerability exists in Checkmk versions prior to 1.6.5, which can be exploited by an attacker to cause a denial of service via Webconf...

Checkmk 2.1.x < 2.1.0p28 Information Disclosure Vulnerability

Checkmk is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:checkmk:checkmk"; if...

Checkmk 2.0.x < 2.0.0p36, 2.1.x < 2.1.0p27 Information Disclosure Vulnerability

Checkmk is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:checkmk:checkmk"; if...

CVE-2023-31207

Transmission of credentials within query parameters in Checkmk = 2.1.0p26, = 2.0.0p35, and = 2.2.0b6 beta may cause the automation user's secret to be written to the site Apache access log...

CVE-2023-31207

Transmission of credentials within query parameters in Checkmk = 2.1.0p26, = 2.0.0p35, and = 2.2.0b6 beta may cause the automation user's secret to be written to the site Apache access log...

Design/Logic Flaw

Transmission of credentials within query parameters in Checkmk = 2.1.0p26, = 2.0.0p35, and = 2.2.0b6 beta may cause the automation user's secret to be written to the site Apache access log...