Lucene search
CheckmkCVE-2024-28828HistoryJul 10, 2024 - 1:15 p.m.
CVE-2024-28828
2024-07-1013:15:10
CWE-352
Checkmk
web.nvd.nist.gov
24
checkmk
csrf
vulnerability
versions
1-click
compromise
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
24.7%
Cross-Site request forgery in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) could lead to 1-click compromize of the site.
Affected configurations
Node
checkmkcheckmkMatch2.0.0-
ORcheckmkcheckmkMatch2.0.0b1
ORcheckmkcheckmkMatch2.0.0b2
ORcheckmkcheckmkMatch2.0.0b3
ORcheckmkcheckmkMatch2.0.0b4
ORcheckmkcheckmkMatch2.0.0b5
ORcheckmkcheckmkMatch2.0.0b6
ORcheckmkcheckmkMatch2.0.0b7
ORcheckmkcheckmkMatch2.0.0b8
ORcheckmkcheckmkMatch2.0.0i1
ORcheckmkcheckmkMatch2.0.0p1
ORcheckmkcheckmkMatch2.0.0p10
ORcheckmkcheckmkMatch2.0.0p11
ORcheckmkcheckmkMatch2.0.0p12
ORcheckmkcheckmkMatch2.0.0p13
ORcheckmkcheckmkMatch2.0.0p14
ORcheckmkcheckmkMatch2.0.0p15
ORcheckmkcheckmkMatch2.0.0p16
ORcheckmkcheckmkMatch2.0.0p17
ORcheckmkcheckmkMatch2.0.0p18
ORcheckmkcheckmkMatch2.0.0p19
ORcheckmkcheckmkMatch2.0.0p2
ORcheckmkcheckmkMatch2.0.0p20
ORcheckmkcheckmkMatch2.0.0p21
ORcheckmkcheckmkMatch2.0.0p22
ORcheckmkcheckmkMatch2.0.0p23
ORcheckmkcheckmkMatch2.0.0p24
ORcheckmkcheckmkMatch2.0.0p25
ORcheckmkcheckmkMatch2.0.0p26
ORcheckmkcheckmkMatch2.0.0p27
ORcheckmkcheckmkMatch2.0.0p28
ORcheckmkcheckmkMatch2.0.0p29
ORcheckmkcheckmkMatch2.0.0p3
ORcheckmkcheckmkMatch2.0.0p30
ORcheckmkcheckmkMatch2.0.0p31
ORcheckmkcheckmkMatch2.0.0p32
ORcheckmkcheckmkMatch2.0.0p33
ORcheckmkcheckmkMatch2.0.0p34
ORcheckmkcheckmkMatch2.0.0p35
ORcheckmkcheckmkMatch2.0.0p36
ORcheckmkcheckmkMatch2.0.0p37
ORcheckmkcheckmkMatch2.0.0p38
ORcheckmkcheckmkMatch2.0.0p4
ORcheckmkcheckmkMatch2.0.0p5
ORcheckmkcheckmkMatch2.0.0p6
ORcheckmkcheckmkMatch2.0.0p7
ORcheckmkcheckmkMatch2.0.0p8
ORcheckmkcheckmkMatch2.0.0p9
ORcheckmkcheckmkMatch2.1.0-
ORcheckmkcheckmkMatch2.1.0b1
ORcheckmkcheckmkMatch2.1.0b2
ORcheckmkcheckmkMatch2.1.0b3
ORcheckmkcheckmkMatch2.1.0b4
ORcheckmkcheckmkMatch2.1.0b5
ORcheckmkcheckmkMatch2.1.0b6
ORcheckmkcheckmkMatch2.1.0b7
ORcheckmkcheckmkMatch2.1.0b8
ORcheckmkcheckmkMatch2.1.0b9
ORcheckmkcheckmkMatch2.1.0p1
ORcheckmkcheckmkMatch2.1.0p10
ORcheckmkcheckmkMatch2.1.0p11
ORcheckmkcheckmkMatch2.1.0p12
ORcheckmkcheckmkMatch2.1.0p13
ORcheckmkcheckmkMatch2.1.0p14
ORcheckmkcheckmkMatch2.1.0p15
ORcheckmkcheckmkMatch2.1.0p16
ORcheckmkcheckmkMatch2.1.0p17
ORcheckmkcheckmkMatch2.1.0p18
ORcheckmkcheckmkMatch2.1.0p19
ORcheckmkcheckmkMatch2.1.0p2
ORcheckmkcheckmkMatch2.1.0p20
ORcheckmkcheckmkMatch2.1.0p21
ORcheckmkcheckmkMatch2.1.0p22
ORcheckmkcheckmkMatch2.1.0p23
ORcheckmkcheckmkMatch2.1.0p24
ORcheckmkcheckmkMatch2.1.0p25
ORcheckmkcheckmkMatch2.1.0p26
ORcheckmkcheckmkMatch2.1.0p27
ORcheckmkcheckmkMatch2.1.0p28
ORcheckmkcheckmkMatch2.1.0p29
ORcheckmkcheckmkMatch2.1.0p3
ORcheckmkcheckmkMatch2.1.0p30
ORcheckmkcheckmkMatch2.1.0p31
ORcheckmkcheckmkMatch2.1.0p32
ORcheckmkcheckmkMatch2.1.0p33
ORcheckmkcheckmkMatch2.1.0p34
ORcheckmkcheckmkMatch2.1.0p35
ORcheckmkcheckmkMatch2.1.0p36
ORcheckmkcheckmkMatch2.1.0p37
ORcheckmkcheckmkMatch2.1.0p38
ORcheckmkcheckmkMatch2.1.0p39
ORcheckmkcheckmkMatch2.1.0p4
ORcheckmkcheckmkMatch2.1.0p40
ORcheckmkcheckmkMatch2.1.0p41
ORcheckmkcheckmkMatch2.1.0p42
ORcheckmkcheckmkMatch2.1.0p43
ORcheckmkcheckmkMatch2.1.0p44
ORcheckmkcheckmkMatch2.1.0p5
ORcheckmkcheckmkMatch2.1.0p6
ORcheckmkcheckmkMatch2.1.0p7
ORcheckmkcheckmkMatch2.1.0p8
ORcheckmkcheckmkMatch2.1.0p9
ORcheckmkcheckmkMatch2.2.0-
ORcheckmkcheckmkMatch2.2.0b1
ORcheckmkcheckmkMatch2.2.0b2
ORcheckmkcheckmkMatch2.2.0b3
ORcheckmkcheckmkMatch2.2.0b4
ORcheckmkcheckmkMatch2.2.0b5
ORcheckmkcheckmkMatch2.2.0b6
ORcheckmkcheckmkMatch2.2.0b7
ORcheckmkcheckmkMatch2.2.0b8
ORcheckmkcheckmkMatch2.2.0i1
ORcheckmkcheckmkMatch2.2.0p1
ORcheckmkcheckmkMatch2.2.0p10
ORcheckmkcheckmkMatch2.2.0p11
ORcheckmkcheckmkMatch2.2.0p12
ORcheckmkcheckmkMatch2.2.0p13
ORcheckmkcheckmkMatch2.2.0p14
ORcheckmkcheckmkMatch2.2.0p15
ORcheckmkcheckmkMatch2.2.0p16
ORcheckmkcheckmkMatch2.2.0p17
ORcheckmkcheckmkMatch2.2.0p18
ORcheckmkcheckmkMatch2.2.0p19
ORcheckmkcheckmkMatch2.2.0p2
ORcheckmkcheckmkMatch2.2.0p20
ORcheckmkcheckmkMatch2.2.0p21
ORcheckmkcheckmkMatch2.2.0p22
ORcheckmkcheckmkMatch2.2.0p23
ORcheckmkcheckmkMatch2.2.0p24
ORcheckmkcheckmkMatch2.2.0p25
ORcheckmkcheckmkMatch2.2.0p26
ORcheckmkcheckmkMatch2.2.0p27
ORcheckmkcheckmkMatch2.2.0p28
ORcheckmkcheckmkMatch2.2.0p3
ORcheckmkcheckmkMatch2.2.0p4
ORcheckmkcheckmkMatch2.2.0p5
ORcheckmkcheckmkMatch2.2.0p6
ORcheckmkcheckmkMatch2.2.0p7
ORcheckmkcheckmkMatch2.2.0p8
ORcheckmkcheckmkMatch2.2.0p9
ORcheckmkcheckmkMatch2.3.0p1
ORcheckmkcheckmkMatch2.3.0p2
ORcheckmkcheckmkMatch2.3.0p3
ORcheckmkcheckmkMatch2.3.0p4
ORcheckmkcheckmkMatch2.3.0p5
ORcheckmkcheckmkMatch2.3.0p6
ORcheckmkcheckmkMatch2.3.0p7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Checkmk",
"vendor": "Checkmk GmbH",
"versions": [
{
"lessThan": "2.3.0p8",
"status": "affected",
"version": "2.3.0",
"versionType": "semver"
},
{
"lessThan": "2.2.0p29",
"status": "affected",
"version": "2.2.0",
"versionType": "semver"
},
{
"lessThan": "2.1.0p45",
"status": "affected",
"version": "2.1.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "2.0.0p39",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
}
]References
Related
osv
osv
CVE-2024-28828
2024-07-10 13:15:00
cvelist
cvelist
CVE-2024-28828 1-Click compromize via CSRF
2024-07-10 12:41:13
vulnrichment
vulnrichment
CVE-2024-28828 1-Click compromize via CSRF
2024-07-10 12:41:13
ubuntucve
ubuntucve
CVE-2024-28828
2024-07-10 00:00:00
nvd
nvd
CVE-2024-28828
2024-07-10 13:15:10
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.6
Confidence
High
EPSS
0.001
Percentile
24.7%
Related for CVE-2024-28828