Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-2020

Insufficient permission checks in the REST API in Tribe29 Checkmk <= 2.1.0p27 and <= 2.2.0b4 (beta) allow unauthorized users to schedule downtimes for any host.

Published

2023-04-18T12:15:07.537

Last Modified

2024-11-21T07:57:46.397

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-280
  • Type: Primary
    CWE-863
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
References