Lucene search
+L

1497 matches found

Positive Technologies
Positive Technologies
added 2025/05/08 12:00 a.m.25 views

PT-2025-20377 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.1.0 through 2.3.0 Checkmk version 2.4.0b6 and earlier Description: The issue allows files to be deployed with agents to be accessible without authentication. This could enable an attacker to access files that may contain...

6.3CVSS6.1AI score0.00311EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/05/08 12:00 a.m.12 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk version 2.4.0 that originates from accessing agent deployment files containing sensitive information without authentication...

6.3CVSS6.3AI score0.00311EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/04/25 4:23 p.m.16 views

CVE-2025-2092

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p29, 2.2.0p41 and =2.1.0p49 EOL causes remote site authentication secrets to be written to log files accessible to administrators...

7.5CVSS7AI score0.00277EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/22 12:15 p.m.15 views

CVE-2025-2092

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p29, 2.2.0p41 and =2.1.0p49 EOL causes remote site authentication secrets to be written to log files accessible to administrators...

7.5CVSS0.00277EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/22 12:15 p.m.12 views

UBUNTU-CVE-2025-2092

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p29, 2.2.0p41 and =2.1.0p49 EOL causes remote site authentication secrets to be written to log files accessible to administrators...

7.5CVSS5.6AI score0.00277EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/04/22 11:38 a.m.34 views

CVE-2025-2092 Remote site authentication secrets written to web log

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p29, 2.2.0p41 and =2.1.0p49 EOL causes remote site authentication secrets to be written to log files accessible to administrators...

7.1CVSS0.00277EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/22 11:38 a.m.11 views

CVE-2025-2092 Remote site authentication secrets written to web log

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p29, 2.2.0p41 and =2.1.0p49 EOL causes remote site authentication secrets to be written to log files accessible to administrators...

7.1CVSS7AI score0.00277EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/22 11:38 a.m.78 views

CVE-2025-2092

Checkmk CVE-2025-2092 affects Checkmk versions <2.3.0p29, <2.2.0p41 and

7.5CVSS6.7AI score0.00277EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/04/22 11:38 a.m.10 views

CVE-2025-2092 Remote site authentication secrets written to web log

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p29, 2.2.0p41 and =2.1.0p49 EOL causes remote site authentication secrets to be written to log files accessible to administrators...

7.1CVSS5.8AI score
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/22 12:00 a.m.12 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. Checkmk has a security vulnerability that originates from a remote site authentication key being written to a log file...

7.5CVSS6.7AI score0.00277EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/22 12:00 a.m.29 views

PT-2025-17523 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.3.0p29 Checkmk versions 2.2.0p41 Checkmk versions =2.1.0p49 Description: The issue involves the insertion of sensitive information into log files in Checkmk, causing remote site authentication secrets to be written to log...

7.1CVSS6.2AI score0.00277EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2025/04/12 8:14 a.m.39 views

CVE-2024-38865

Improper neutralization of livestatus command delimiters in a specific endpoint within RestAPI of Checkmk prior to 2.2.0p39, 2.3.0p25, and 2.1.0p51 EOL allows arbitrary livestatus command execution. Exploitation requires the attacker to have a contact group assigned to their user account and for ...

6CVSS7.5AI score0.00786EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/10 8:15 a.m.15 views

CVE-2024-38865

Improper neutralization of livestatus command delimiters in a specific endpoint within RestAPI of Checkmk prior to 2.2.0p39, 2.3.0p25, and 2.1.0p51 EOL allows arbitrary livestatus command execution. Exploitation requires the attacker to have a contact group assigned to their user account and for ...

8.8CVSS0.00786EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/10 8:15 a.m.27 views

UBUNTU-CVE-2024-38865

Improper neutralization of livestatus command delimiters in a specific endpoint within RestAPI of Checkmk prior to 2.2.0p39, 2.3.0p25, and 2.1.0p51 EOL allows arbitrary livestatus command execution. Exploitation requires the attacker to have a contact group assigned to their user account and for ...

8.8CVSS5.9AI score0.00786EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/04/10 7:35 a.m.6 views

CVE-2024-38865 Livestatus command injection in RestAPI

Improper neutralization of livestatus command delimiters in a specific endpoint within RestAPI of Checkmk prior to 2.2.0p39, 2.3.0p25, and 2.1.0p51 EOL allows arbitrary livestatus command execution. Exploitation requires the attacker to have a contact group assigned to their user account and for ...

6CVSS6.8AI score0.00786EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/10 7:35 a.m.22 views

CVE-2024-38865 Livestatus command injection in RestAPI

Improper neutralization of livestatus command delimiters in a specific endpoint within RestAPI of Checkmk prior to 2.2.0p39, 2.3.0p25, and 2.1.0p51 EOL allows arbitrary livestatus command execution. Exploitation requires the attacker to have a contact group assigned to their user account and for ...

6CVSS0.00786EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/10 7:35 a.m.56 views

CVE-2024-38865

CVE-2024-38865 affects Checkmk RestAPI: an improper neutralization of livestatus command delimiters in a specific endpoint allows arbitrary livestatus command execution. Affected versions are prior to 2.2.0p39, 2.3.0p25, and 2.1.0p51 (EOL). Exploitation requires the attacker to belong to a contac...

8.8CVSS6.9AI score0.00786EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/04/10 7:35 a.m.10 views

CVE-2024-38865 Livestatus command injection in RestAPI

Improper neutralization of livestatus command delimiters in a specific endpoint within RestAPI of Checkmk prior to 2.2.0p39, 2.3.0p25, and 2.1.0p51 EOL allows arbitrary livestatus command execution. Exploitation requires the attacker to have a contact group assigned to their user account and for ...

6CVSS6AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/04/10 12:00 a.m.11 views

PT-2025-15924 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.2.0p39 Checkmk versions prior to 2.3.0p25 Checkmk versions prior to 2.1.0p51 Description: The issue is related to improper neutralization of livestatus command delimiters in a specific endpoint within the RestAPI o...

8.8CVSS6.6AI score0.00786EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2025/03/28 11:37 a.m.27 views

CVE-2025-2596

Session logout could be overwritten in Checkmk GmbH's Checkmk versions 2.3.0p30, 2.2.0p41, and 2.1.0p49 EOL...

5.3CVSS7.2AI score0.00203EPSS
SaveExploits0References1
Rows per page
Query Builder