Tribe29 Checkmk

• CVE-2023-22359 Medium 4.3 User-enumeration in RestAPI 0.5%
• CVE-2023-31207 Medium 4.4 Automation user secret logged to Apache access log 0.2%
• CVE-2022-46302 High 8.8 Remote Code Execution with Root Privileges via Broad Apache Permissions 0.4%
• CVE-2023-2020 Medium 4.3 Unauthorized scheduling of downtimes via REST API 0.4%
• CVE-2023-1768 Low 3.7 Symmetric agent data encryption fails silently 0.9%
• CVE-2023-22288 Medium 6.8 Email HTML Injection 0.4%
• CVE-2022-48320 Medium 5.4 CSRF in add-visual endpoint 0.2%
• CVE-2022-48319 Medium 6.5 Host secret disclosed in Checkmk logs 0.2%
• CVE-2022-48318 Medium 5.3 Insecure access control mechanisms for RestAPI documentation 0.5%
• CVE-2022-48317 Medium 5.6 Insecure Termination of RestAPI Session Tokens 0.5%
• CVE-2022-48321 Medium 6.8 SSRF in agent-receiver API 0.3%
• CVE-2022-47909 Medium 6.8 LQL Injection in Livestatus HTTP headers 0.4%
• CVE-2022-46836 Critical 9.1 PHP code injection in watolib 1.1%
• CVE-2022-46303 High 8.0 Command injection in SMS notifications 1.1%
• CVE-2022-43440 High 8.8 Privilege escalation via manipulated unixcat executable 0.2%
• CVE-2023-0284 Medium 6.8 Improper validation of LDAP user IDs 1.0%
• CVE-2022-4884 Low 3.5 Path-Traversal in MKP storing 0.5%