Lucene search

Tribe29CVE-2022-48321

HistoryFeb 20, 2023 - 5:15 p.m.

CVE-2022-48321

2023-02-2017:15:12

CWE-918

CWE-20

Tribe29

web.nvd.nist.gov

cve-2022-48321

server-side request forgery

ssrf

tribe29

checkmk

nvd

CVSS3

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

AI Score

Confidence

High

EPSS

Percentile

13.5%

JSON

Limited Server-Side Request Forgery (SSRF) in agent-receiver in Tribe29’s Checkmk <= 2.1.0p11 allows an attacker to communicate with local network restricted endpoints by use of the host registration API.

Affected configurations

Nvd

Node

checkmkcheckmkMatch2.1.0-

checkmkcheckmkMatch2.1.0b1

checkmkcheckmkMatch2.1.0b2

checkmkcheckmkMatch2.1.0b3

checkmkcheckmkMatch2.1.0b4

checkmkcheckmkMatch2.1.0b5

checkmkcheckmkMatch2.1.0b6

checkmkcheckmkMatch2.1.0b7

checkmkcheckmkMatch2.1.0b8

checkmkcheckmkMatch2.1.0b9

checkmkcheckmkMatch2.1.0p1

checkmkcheckmkMatch2.1.0p10

checkmkcheckmkMatch2.1.0p11

checkmkcheckmkMatch2.1.0p2

checkmkcheckmkMatch2.1.0p3

checkmkcheckmkMatch2.1.0p4

checkmkcheckmkMatch2.1.0p5

checkmkcheckmkMatch2.1.0p6

checkmkcheckmkMatch2.1.0p7

checkmkcheckmkMatch2.1.0p8

checkmkcheckmkMatch2.1.0p9

VendorProductVersionCPE
checkmkcheckmk2.1.0cpe:2.3:a:checkmk:checkmk:2.1.0:-:*:*:*:*:*:*
checkmkcheckmk2.1.0cpe:2.3:a:checkmk:checkmk:2.1.0:b1:*:*:*:*:*:*
checkmkcheckmk2.1.0cpe:2.3:a:checkmk:checkmk:2.1.0:b2:*:*:*:*:*:*
checkmkcheckmk2.1.0cpe:2.3:a:checkmk:checkmk:2.1.0:b3:*:*:*:*:*:*
checkmkcheckmk2.1.0cpe:2.3:a:checkmk:checkmk:2.1.0:b4:*:*:*:*:*:*
checkmkcheckmk2.1.0cpe:2.3:a:checkmk:checkmk:2.1.0:b5:*:*:*:*:*:*
checkmkcheckmk2.1.0cpe:2.3:a:checkmk:checkmk:2.1.0:b6:*:*:*:*:*:*
checkmkcheckmk2.1.0cpe:2.3:a:checkmk:checkmk:2.1.0:b7:*:*:*:*:*:*
checkmkcheckmk2.1.0cpe:2.3:a:checkmk:checkmk:2.1.0:b8:*:*:*:*:*:*
checkmkcheckmk2.1.0cpe:2.3:a:checkmk:checkmk:2.1.0:b9:*:*:*:*:*:*

Vendor	Product	Version	CPE
checkmk	checkmk	2.1.0	cpe:2.3:a:checkmk:checkmk:2.1.0:-::::::
checkmk	checkmk	2.1.0	cpe:2.3:a:checkmk:checkmk:2.1.0:b1::::::
checkmk	checkmk	2.1.0	cpe:2.3:a:checkmk:checkmk:2.1.0:b2::::::
checkmk	checkmk	2.1.0	cpe:2.3:a:checkmk:checkmk:2.1.0:b3::::::
checkmk	checkmk	2.1.0	cpe:2.3:a:checkmk:checkmk:2.1.0:b4::::::
checkmk	checkmk	2.1.0	cpe:2.3:a:checkmk:checkmk:2.1.0:b5::::::
checkmk	checkmk	2.1.0	cpe:2.3:a:checkmk:checkmk:2.1.0:b6::::::
checkmk	checkmk	2.1.0	cpe:2.3:a:checkmk:checkmk:2.1.0:b7::::::
checkmk	checkmk	2.1.0	cpe:2.3:a:checkmk:checkmk:2.1.0:b8::::::
checkmk	checkmk	2.1.0	cpe:2.3:a:checkmk:checkmk:2.1.0:b9::::::

Rows per page:

1-10 of 211

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Checkmk",
    "vendor": "Tribe29",
    "versions": [
      {
        "lessThanOrEqual": "2.1.0p11",
        "status": "affected",
        "version": "2.1.0",
        "versionType": "semver"
      }
    ]
  }
]