Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-6251
HistoryNov 24, 2023 - 12:00 a.m.

CVE-2023-6251

2023-11-2400:00:00
ubuntu.com
ubuntu.com
10
cve-2023-6251
cross-site request forgery
checkmk
authenticated attacker
user-messages
unix

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

14.0%

Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <=
2.0.0p39 allow an authenticated attacker to delete user-messages for
individual users.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchcheck-mk< anyUNKNOWN
ubuntu16.04noarchcheck-mk< anyUNKNOWN

CVSS3

3.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

14.0%

Related for UB:CVE-2023-6251