Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-28826

Improper restriction of local upload and download paths in check_sftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and in Checkmk 2.0.0 (EOL) allows attackers with sufficient permissions to configure the check to read and write local files on the Checkmk site server.

Published

2024-05-29T10:15:09.010

Last Modified

2024-12-04T16:32:38.107

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-73
  • Type: Primary
    CWE-610
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application checkmk checkmk ≤ 2.0.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.1.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.2.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
Application checkmk checkmk 2.3.0 Yes
References