Skip to content
OpenAdvisories

Product · Tribe29

Checkmk

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2022-46302

    Remote Code Execution with Root Privileges via Broad Apache Permissions

    Broad access controls could allow site users to directly interact with the system Apache installation when providing the reverse proxy configurations for Tribe29's Checkmk <= 2.1.0p6, Checkmk <= 2.0.0p27, and all versions of Checkmk 1.6.0 (EOL) allowing an at…

    Tribe29 Checkmk check-mk Ubuntu
  • High 8.0
    CVE-2022-46303

    Command injection in SMS notifications

    Command injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within …

    Tribe29 Checkmk check-mk Ubuntu
  • High 8.8
    CVE-2022-43440

    Privilege escalation via manipulated unixcat executable

    Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29 on a Checkmk server allows the site user to escalate privileges via a manipulated unixcat executable

    Tribe29 Checkmk check-mk Ubuntu