Skip to content
OpenAdvisories
High WID-SEC-2024-0065 3 CVEs

tribe29 checkmk: Mehrere Schwachstellen

Published Jan 10, 2024 · Updated Jan 10, 2024 · de-DE

Vendor: Tribe29 Product: Checkmk Product: checkmk < 2.1.0p38 Product: checkmk < 2.2.0p18 Product: checkmk < 2.3.0b1 Platform: Linux Platform: Windows

Summary

Ein authentifizierter Angreifer kann mehrere Schwachstellen in tribe29 checkmk ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder seine Privilegien zu erweitern.

Product

Checkmk ist eine IT-Monitoring-Software.

Vulnerabilities 3

  • High 8.8
    CVE-2023-31211

    Disabled automation users could still authenticate

    Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials

    Checkmk Checkmk check-mk Ubuntu
  • High 8.8
    CVE-2023-6735

    Privilege escalation in mk_tsm

    Privilege escalation in mk_tsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges

    Checkmk Checkmk check-mk Ubuntu
  • High 8.8
    CVE-2023-6740

    Privilege escalation in jar_signature

    Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges

    Checkmk Checkmk check-mk Ubuntu

Revision history

  1. #1

    Initiale Fassung

References