Lucene search

Tribe29CVE-2023-22359

HistoryJun 26, 2023 - 7:15 a.m.

CVE-2023-22359

2023-06-2607:15:09

CWE-203

Tribe29

web.nvd.nist.gov

cve-2023-22359

user enumeration

checkmk

security vulnerability

authenticated attacker

username enumeration

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.4

Confidence

High

EPSS

0.001

Percentile

17.7%

JSON

User enumeration in Checkmk <=2.2.0p4 allows an authenticated attacker to enumerate usernames.

Affected configurations

Nvd

Node

checkmkcheckmkMatch2.2.0-

checkmkcheckmkMatch2.2.0b1

checkmkcheckmkMatch2.2.0b2

checkmkcheckmkMatch2.2.0b3

checkmkcheckmkMatch2.2.0b4

checkmkcheckmkMatch2.2.0b5

checkmkcheckmkMatch2.2.0b6

checkmkcheckmkMatch2.2.0b7

checkmkcheckmkMatch2.2.0b8

checkmkcheckmkMatch2.2.0i1

checkmkcheckmkMatch2.2.0p1

checkmkcheckmkMatch2.2.0p2

checkmkcheckmkMatch2.2.0p3

checkmkcheckmkMatch2.2.0p4

VendorProductVersionCPE
checkmkcheckmk2.2.0cpe:2.3:a:checkmk:checkmk:2.2.0:-:*:*:*:*:*:*
checkmkcheckmk2.2.0cpe:2.3:a:checkmk:checkmk:2.2.0:b1:*:*:*:*:*:*
checkmkcheckmk2.2.0cpe:2.3:a:checkmk:checkmk:2.2.0:b2:*:*:*:*:*:*
checkmkcheckmk2.2.0cpe:2.3:a:checkmk:checkmk:2.2.0:b3:*:*:*:*:*:*
checkmkcheckmk2.2.0cpe:2.3:a:checkmk:checkmk:2.2.0:b4:*:*:*:*:*:*
checkmkcheckmk2.2.0cpe:2.3:a:checkmk:checkmk:2.2.0:b5:*:*:*:*:*:*
checkmkcheckmk2.2.0cpe:2.3:a:checkmk:checkmk:2.2.0:b6:*:*:*:*:*:*
checkmkcheckmk2.2.0cpe:2.3:a:checkmk:checkmk:2.2.0:b7:*:*:*:*:*:*
checkmkcheckmk2.2.0cpe:2.3:a:checkmk:checkmk:2.2.0:b8:*:*:*:*:*:*
checkmkcheckmk2.2.0cpe:2.3:a:checkmk:checkmk:2.2.0:i1:*:*:*:*:*:*

Vendor	Product	Version	CPE
checkmk	checkmk	2.2.0	cpe:2.3:a:checkmk:checkmk:2.2.0:-::::::
checkmk	checkmk	2.2.0	cpe:2.3:a:checkmk:checkmk:2.2.0:b1::::::
checkmk	checkmk	2.2.0	cpe:2.3:a:checkmk:checkmk:2.2.0:b2::::::
checkmk	checkmk	2.2.0	cpe:2.3:a:checkmk:checkmk:2.2.0:b3::::::
checkmk	checkmk	2.2.0	cpe:2.3:a:checkmk:checkmk:2.2.0:b4::::::
checkmk	checkmk	2.2.0	cpe:2.3:a:checkmk:checkmk:2.2.0:b5::::::
checkmk	checkmk	2.2.0	cpe:2.3:a:checkmk:checkmk:2.2.0:b6::::::
checkmk	checkmk	2.2.0	cpe:2.3:a:checkmk:checkmk:2.2.0:b7::::::
checkmk	checkmk	2.2.0	cpe:2.3:a:checkmk:checkmk:2.2.0:b8::::::
checkmk	checkmk	2.2.0	cpe:2.3:a:checkmk:checkmk:2.2.0:i1::::::

Rows per page:

1-10 of 141

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Checkmk",
    "vendor": "Tribe29",
    "versions": [
      {
        "lessThanOrEqual": "2.2.0p4",
        "status": "affected",
        "version": "2.2.0",
        "versionType": "semver"
      }
    ]
  }
]