CVE-2024-6163 | THREATINT

Assigner	Checkmk
Reserved	2024-06-19
Published	2024-07-08
Updated	2024-08-02

Description

Certain http endpoints of Checkmk in Checkmk < 2.3.0p10 < 2.2.0p31, < 2.1.0p46, <= 2.0.0p39 allows remote attacker to bypass authentication and access data

MEDIUM: 5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Problem types

CWE-290: Authentication Bypass by Spoofing

Product status

Default status

unaffected

2.3.0 before 2.3.0p10

affected

2.2.0 before 2.2.0p31

affected

2.1.0 before 2.1.0p46

affected

2.0.0

affected

Credits

PS Positive Security GmbH 0x40069a69f0

References

https://checkmk.com/werk/17011

cve.org CVE-2024-6163

nvd.nist.gov CVE-2024-6163

Download JSON

https://cve.threatint.com

Subscribe to our newsletter to learn more about our work.