Lucene search

K
cveCheckmkCVE-2023-31211
HistoryJan 12, 2024 - 8:15 a.m.

CVE-2023-31211

2024-01-1208:15:43
CWE-303
CWE-670
Checkmk
web.nvd.nist.gov
38
cve-2023-31211
checkmk
authentication
security
vulnerability

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

16.0%

Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials

Affected configurations

Nvd
Node
checkmkcheckmkMatch2.0.0b1
OR
checkmkcheckmkMatch2.0.0b2
OR
checkmkcheckmkMatch2.0.0b3
OR
checkmkcheckmkMatch2.0.0b4
OR
checkmkcheckmkMatch2.0.0b5
OR
checkmkcheckmkMatch2.0.0b6
OR
checkmkcheckmkMatch2.0.0b7
OR
checkmkcheckmkMatch2.0.0b8
OR
checkmkcheckmkMatch2.0.0i1
OR
checkmkcheckmkMatch2.0.0p1
OR
checkmkcheckmkMatch2.0.0p10
OR
checkmkcheckmkMatch2.0.0p11
OR
checkmkcheckmkMatch2.0.0p12
OR
checkmkcheckmkMatch2.0.0p13
OR
checkmkcheckmkMatch2.0.0p14
OR
checkmkcheckmkMatch2.0.0p15
OR
checkmkcheckmkMatch2.0.0p16
OR
checkmkcheckmkMatch2.0.0p17
OR
checkmkcheckmkMatch2.0.0p18
OR
checkmkcheckmkMatch2.0.0p19
OR
checkmkcheckmkMatch2.0.0p2
OR
checkmkcheckmkMatch2.0.0p20
OR
checkmkcheckmkMatch2.0.0p21
OR
checkmkcheckmkMatch2.0.0p22
OR
checkmkcheckmkMatch2.0.0p23
OR
checkmkcheckmkMatch2.0.0p24
OR
checkmkcheckmkMatch2.0.0p25
OR
checkmkcheckmkMatch2.0.0p26
OR
checkmkcheckmkMatch2.0.0p27
OR
checkmkcheckmkMatch2.0.0p28
OR
checkmkcheckmkMatch2.0.0p29
OR
checkmkcheckmkMatch2.0.0p3
OR
checkmkcheckmkMatch2.0.0p30
OR
checkmkcheckmkMatch2.0.0p31
OR
checkmkcheckmkMatch2.0.0p32
OR
checkmkcheckmkMatch2.0.0p33
OR
checkmkcheckmkMatch2.0.0p34
OR
checkmkcheckmkMatch2.0.0p35
OR
checkmkcheckmkMatch2.0.0p36
OR
checkmkcheckmkMatch2.0.0p37
OR
checkmkcheckmkMatch2.0.0p38
OR
checkmkcheckmkMatch2.0.0p4
OR
checkmkcheckmkMatch2.0.0p5
OR
checkmkcheckmkMatch2.0.0p6
OR
checkmkcheckmkMatch2.0.0p7
OR
checkmkcheckmkMatch2.0.0p8
OR
checkmkcheckmkMatch2.0.0p9
OR
checkmkcheckmkMatch2.1.0-
OR
checkmkcheckmkMatch2.1.0b1
OR
checkmkcheckmkMatch2.1.0b2
OR
checkmkcheckmkMatch2.1.0b3
OR
checkmkcheckmkMatch2.1.0b4
OR
checkmkcheckmkMatch2.1.0b5
OR
checkmkcheckmkMatch2.1.0b6
OR
checkmkcheckmkMatch2.1.0b7
OR
checkmkcheckmkMatch2.1.0b8
OR
checkmkcheckmkMatch2.1.0b9
OR
checkmkcheckmkMatch2.1.0p1
OR
checkmkcheckmkMatch2.1.0p10
OR
checkmkcheckmkMatch2.1.0p11
OR
checkmkcheckmkMatch2.1.0p12
OR
checkmkcheckmkMatch2.1.0p13
OR
checkmkcheckmkMatch2.1.0p14
OR
checkmkcheckmkMatch2.1.0p15
OR
checkmkcheckmkMatch2.1.0p16
OR
checkmkcheckmkMatch2.1.0p17
OR
checkmkcheckmkMatch2.1.0p18
OR
checkmkcheckmkMatch2.1.0p19
OR
checkmkcheckmkMatch2.1.0p2
OR
checkmkcheckmkMatch2.1.0p20
OR
checkmkcheckmkMatch2.1.0p21
OR
checkmkcheckmkMatch2.1.0p22
OR
checkmkcheckmkMatch2.1.0p23
OR
checkmkcheckmkMatch2.1.0p24
OR
checkmkcheckmkMatch2.1.0p25
OR
checkmkcheckmkMatch2.1.0p26
OR
checkmkcheckmkMatch2.1.0p27
OR
checkmkcheckmkMatch2.1.0p28
OR
checkmkcheckmkMatch2.1.0p29
OR
checkmkcheckmkMatch2.1.0p3
OR
checkmkcheckmkMatch2.1.0p30
OR
checkmkcheckmkMatch2.1.0p31
OR
checkmkcheckmkMatch2.1.0p32
OR
checkmkcheckmkMatch2.1.0p33
OR
checkmkcheckmkMatch2.1.0p34
OR
checkmkcheckmkMatch2.1.0p35
OR
checkmkcheckmkMatch2.1.0p36
OR
checkmkcheckmkMatch2.1.0p37
OR
checkmkcheckmkMatch2.1.0p4
OR
checkmkcheckmkMatch2.1.0p5
OR
checkmkcheckmkMatch2.1.0p6
OR
checkmkcheckmkMatch2.1.0p7
OR
checkmkcheckmkMatch2.1.0p8
OR
checkmkcheckmkMatch2.1.0p9
OR
checkmkcheckmkMatch2.2.0-
OR
checkmkcheckmkMatch2.2.0b1
OR
checkmkcheckmkMatch2.2.0b2
OR
checkmkcheckmkMatch2.2.0b3
OR
checkmkcheckmkMatch2.2.0b4
OR
checkmkcheckmkMatch2.2.0b5
OR
checkmkcheckmkMatch2.2.0b6
OR
checkmkcheckmkMatch2.2.0b7
OR
checkmkcheckmkMatch2.2.0b8
OR
checkmkcheckmkMatch2.2.0i1
OR
checkmkcheckmkMatch2.2.0p1
OR
checkmkcheckmkMatch2.2.0p10
OR
checkmkcheckmkMatch2.2.0p11
OR
checkmkcheckmkMatch2.2.0p12
OR
checkmkcheckmkMatch2.2.0p13
OR
checkmkcheckmkMatch2.2.0p14
OR
checkmkcheckmkMatch2.2.0p15
OR
checkmkcheckmkMatch2.2.0p16
OR
checkmkcheckmkMatch2.2.0p17
OR
checkmkcheckmkMatch2.2.0p2
OR
checkmkcheckmkMatch2.2.0p3
OR
checkmkcheckmkMatch2.2.0p4
OR
checkmkcheckmkMatch2.2.0p5
OR
tribe29checkmkRange2.0.0
VendorProductVersionCPE
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:*
checkmkcheckmk2.0.0cpe:2.3:a:checkmk:checkmk:2.0.0:p1:*:*:*:*:*:*
Rows per page:
1-10 of 1181

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Checkmk",
    "vendor": "Checkmk GmbH",
    "versions": [
      {
        "lessThan": "2.2.0p18",
        "status": "affected",
        "version": "2.2.0",
        "versionType": "semver"
      },
      {
        "lessThan": "2.1.0p38",
        "status": "affected",
        "version": "2.1.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "2.0.0p39",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "semver"
      }
    ]
  }
]

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

16.0%