Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tribe29 checkmk 1.6.0p17 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2021-40906
CheckMK Raw Edition software (versions 1.5.0 to 1.6.0) does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an malicious user to open a backdoor on the device with HTML content and interpreted by the browser (such as...
Tribe29 CheckmkTribe29 Checkmk 1.6.0Tribe29 Checkmk 1.6.0b10Tribe29 Checkmk 1.6.0b11Tribe29 Checkmk 1.6.0p10Tribe29 Checkmk 1.6.0p17Tribe29 Checkmk 1.6.0p18
7.2
CVSSv2
CVE-2022-31258
In Checkmk prior to 1.6.0p29, 2.x prior to 2.0.0p25, and 2.1.x prior to 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.
Tribe29 Checkmk 1.6.0Tribe29 Checkmk 2.0.0Tribe29 CheckmkTribe29 Checkmk 2.1.0Tribe29 Checkmk 1.6.0b10Tribe29 Checkmk 1.6.0b11Tribe29 Checkmk 1.6.0p10Tribe29 Checkmk 1.6.0p17Tribe29 Checkmk 1.6.0p18Tribe29 Checkmk 1.6.0p11Tribe29 Checkmk 1.6.0p12Tribe29 Checkmk 1.6.0p13Tribe29 Checkmk 1.6.0p14Tribe29 Checkmk 1.6.0p15Tribe29 Checkmk 1.6.0p16
NA
CVE-2023-1768
Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.
Tribe29 Checkmk 1.6.0Tribe29 Checkmk 2.0.0Tribe29 Checkmk 1.6.0b10Tribe29 Checkmk 1.6.0b11Tribe29 Checkmk 1.6.0p10Tribe29 Checkmk 1.6.0p17Tribe29 Checkmk 1.6.0p18Tribe29 Checkmk 2.1.0Tribe29 Checkmk 1.6.0p11Tribe29 Checkmk 1.6.0p12Tribe29 Checkmk 1.6.0p13Tribe29 Checkmk 1.6.0p14Tribe29 Checkmk 1.6.0p15Tribe29 Checkmk 1.6.0p16Tribe29 Checkmk 2.2.0
7.2
CVSSv2
CVE-2020-24908
Checkmk prior to 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\checkmk\agent\local directory.
Tribe29 CheckmkTribe29 Checkmk 1.6.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook