Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2024-8606

Fix 2FA bypass via RestAPI

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Checkmk

Description

Bypass of two factor authentication in RestAPI in Checkmk < 2.3.0p16 and < 2.2.0p34 allows authenticated users to bypass two factor authentication

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Checkmk GmbH Checkmk

Default version status: unaffected

  • 2.3.0 to < 2.3.0p16affected
  • 2.2.0 to < 2.2.0p34affected

References