Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-22348

Reading host_configs does not honour contact groups

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Tribe29

Description

Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Checkmk GmbH Checkmk

Default version status: unaffected

  • 2.2.0 to < 2.2.0b8affected
  • 2.1.0 to < 2.1.0p28affected

References