Skip to content
OpenAdvisories
Unscored USN-5527-2 4 CVEs

check-mk vulnerabilities

Published Jul 20, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-5527-1 fixed vulnerabilities in Checkmk. This update provides the
corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that Checkmk incorrectly handled authentication. An attacker
could possibly use this issue to cause a race condition leading to information
disclosure. (CVE-2017-14955)

It was discovered that Checkmk incorrectly handled certain inputs. An attacker
could use these cross-site scripting issues to inject arbitrary html or
javascript code to obtain sensitive information including user information,
session cookies and valid credentials. (CVE-2017-9781, CVE-2021-36563,
CVE-2021-40906, CVE-2022-24565)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS check-mk 1.2.6p12-1ubuntu0.16.04.1+esm1

Vulnerabilities 4

  • Unscored —
    CVE-2017-14955 Public exploit EPSS 12%

    Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, wh…

    check-mk Ubuntu
  • Unscored —
    CVE-2017-9781

    A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6, allowing an unauthentic…

    check-mk Ubuntu
  • Unscored —
    CVE-2021-36563 Public exploit

    The CheckMK management web console (versions 1.5.0 to 2.0.0) does not sanitise user input in various parameters of the …

    check-mk Ubuntu
  • Unscored —
    CVE-2022-24565

    Checkmk <=2.0.0p19 Fixed in 2.0.0p20 and Checkmk <=1.6.0p27 Fixed in 1.6.0p28 are affected by a Cross Site Scripting (X…

    check-mk Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2017-9781
  • report
    https://ubuntu.com/security/CVE-2017-14955
  • report
    https://ubuntu.com/security/CVE-2021-36563
  • report
    https://ubuntu.com/security/CVE-2022-24565