Lucene search
HistoryJan 26, 2023 - 9:18 p.m.
CVE-2023-0284
improper input validation
ldap user ids
tribe29 checkmk
manipulate files
server
checkmk 2.1.0p19
checkmk 2.0.0p32
checkmk 1.6.0 eol
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
33.4%
Improper Input Validation of LDAP user IDs in Tribe29 Checkmk allows attackers that can control LDAP user IDs to manipulate files on the server. Checkmk <= 2.1.0p19, Checkmk <= 2.0.0p32, and all versions of Checkmk 1.6.0 (EOL) are affected.
Affected configurations
Node
checkmkcheckmkMatch2.0.0-
ORcheckmkcheckmkMatch2.0.0b1
ORcheckmkcheckmkMatch2.0.0b2
ORcheckmkcheckmkMatch2.0.0b3
ORcheckmkcheckmkMatch2.0.0b4
ORcheckmkcheckmkMatch2.0.0b5
ORcheckmkcheckmkMatch2.0.0b6
ORcheckmkcheckmkMatch2.0.0b7
ORcheckmkcheckmkMatch2.0.0b8
ORcheckmkcheckmkMatch2.0.0i1
ORcheckmkcheckmkMatch2.0.0p1
ORcheckmkcheckmkMatch2.0.0p10
ORcheckmkcheckmkMatch2.0.0p11
ORcheckmkcheckmkMatch2.0.0p12
ORcheckmkcheckmkMatch2.0.0p13
ORcheckmkcheckmkMatch2.0.0p14
ORcheckmkcheckmkMatch2.0.0p15
ORcheckmkcheckmkMatch2.0.0p16
ORcheckmkcheckmkMatch2.0.0p17
ORcheckmkcheckmkMatch2.0.0p18
ORcheckmkcheckmkMatch2.0.0p19
ORcheckmkcheckmkMatch2.0.0p2
ORcheckmkcheckmkMatch2.0.0p20
ORcheckmkcheckmkMatch2.0.0p21
ORcheckmkcheckmkMatch2.0.0p22
ORcheckmkcheckmkMatch2.0.0p23
ORcheckmkcheckmkMatch2.0.0p24
ORcheckmkcheckmkMatch2.0.0p25
ORcheckmkcheckmkMatch2.0.0p26
ORcheckmkcheckmkMatch2.0.0p27
ORcheckmkcheckmkMatch2.0.0p28
ORcheckmkcheckmkMatch2.0.0p29
ORcheckmkcheckmkMatch2.0.0p3
ORcheckmkcheckmkMatch2.0.0p30
ORcheckmkcheckmkMatch2.0.0p31
ORcheckmkcheckmkMatch2.0.0p32
ORcheckmkcheckmkMatch2.0.0p4
ORcheckmkcheckmkMatch2.0.0p5
ORcheckmkcheckmkMatch2.0.0p6
ORcheckmkcheckmkMatch2.0.0p7
ORcheckmkcheckmkMatch2.0.0p8
ORcheckmkcheckmkMatch2.0.0p9
ORcheckmkcheckmkMatch2.1.0b1
ORcheckmkcheckmkMatch2.1.0b2
ORcheckmkcheckmkMatch2.1.0b3
ORcheckmkcheckmkMatch2.1.0b4
ORcheckmkcheckmkMatch2.1.0b5
ORcheckmkcheckmkMatch2.1.0b6
ORcheckmkcheckmkMatch2.1.0b7
ORcheckmkcheckmkMatch2.1.0b8
ORcheckmkcheckmkMatch2.1.0b9
ORcheckmkcheckmkMatch2.1.0p1
ORcheckmkcheckmkMatch2.1.0p10
ORcheckmkcheckmkMatch2.1.0p11
ORcheckmkcheckmkMatch2.1.0p12
ORcheckmkcheckmkMatch2.1.0p13
ORcheckmkcheckmkMatch2.1.0p14
ORcheckmkcheckmkMatch2.1.0p15
ORcheckmkcheckmkMatch2.1.0p16
ORcheckmkcheckmkMatch2.1.0p17
ORcheckmkcheckmkMatch2.1.0p18
ORcheckmkcheckmkMatch2.1.0p19
ORcheckmkcheckmkMatch2.1.0p2
ORcheckmkcheckmkMatch2.1.0p3
ORcheckmkcheckmkMatch2.1.0p4
ORcheckmkcheckmkMatch2.1.0p5
ORcheckmkcheckmkMatch2.1.0p6
ORcheckmkcheckmkMatch2.1.0p7
ORcheckmkcheckmkMatch2.1.0p8
ORcheckmkcheckmkMatch2.1.0p9
ORtribe29checkmkRange1.6.0–2.0.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:-:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b1:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b2:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b3:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b4:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b5:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b6:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b7:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:b8:*:*:*:*:*:* |
| checkmk | checkmk | 2.0.0 | cpe:2.3:a:checkmk:checkmk:2.0.0:i1:*:*:*:*:*:* |
References
Related
openvas
openvas
prion
prion
Input validation
2023-01-26 21:18:00
cvelist
cvelist
CVE-2023-0284 Improper validation of LDAP user IDs
2023-01-24 12:03:57
cve
cve
CVE-2023-0284
2023-01-26 21:18:07
ubuntucve
ubuntucve
CVE-2023-0284
2023-01-26 00:00:00
osv
osv
CVE-2023-0284
2023-01-26 21:18:07
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
33.4%
Related for NVD:CVE-2023-0284