Tribe29 Checkmk vulnerabilities

Newest CVEs

• CVE-2023-22359

  User-enumeration in RestAPI

  Tribe29 · Checkmk

  Medium4.3
• CVE-2023-31207

  Automation user secret logged to Apache access log

  Tribe29 · Checkmk

  Medium4.4
• CVE-2022-46302

  Remote Code Execution with Root Privileges via Broad Apache Permissions

  Tribe29 · Checkmk

  High8.8
• CVE-2023-2020

  Unauthorized scheduling of downtimes via REST API

  Tribe29 · Checkmk

  Medium4.3
• CVE-2023-1768

  Symmetric agent data encryption fails silently

  Tribe29 · Checkmk

  Low3.7
• CVE-2023-22288

  Email HTML Injection

  Tribe29 · Checkmk

  Medium6.8
• CVE-2022-48320

  CSRF in add-visual endpoint

  Tribe29 · Checkmk

  Medium5.4
• CVE-2022-48319

  Host secret disclosed in Checkmk logs

  Tribe29 · Checkmk

  Medium6.5
• CVE-2022-48318

  Insecure access control mechanisms for RestAPI documentation

  Tribe29 · Checkmk

  Medium5.3
• CVE-2022-48317

  Insecure Termination of RestAPI Session Tokens

  Tribe29 · Checkmk

  Medium5.6