Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5527-1
HistoryJul 20, 2022 - 12:00 a.m.

Checkmk vulnerabilities

2022-07-2000:00:00
ubuntu.com
41
checkmk
ubuntu
authentication
race condition
information disclosure
cross-site scripting
html
javascript
cve-2017-14955
cve-2017-9781
cve-2021-36563
cve-2021-40906
cve-2022-24565
packages
monitoring plugin

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.015

Percentile

87.0%

JSON

Releases

  • Ubuntu 18.04 ESM

Packages

  • check-mk - general purpose monitoring plugin for retrieving data

Details

It was discovered that Checkmk incorrectly handled authentication. An attacker
could possibly use this issue to cause a race condition leading to information
disclosure. (CVE-2017-14955)

It was discovered that Checkmk incorrectly handled certain inputs. An attacker
could use these cross-site scripting issues to inject arbitrary html or
javascript code to obtain sensitive information including user information,
session cookies and valid credentials. (CVE-2017-9781, CVE-2021-36563,
CVE-2021-40906, CVE-2022-24565)

Related

osv 6
openvas 8
nessus 6
ubuntu 1
cvelist 5
ubuntucve 5
prion 5
cve 5
nvd 5
redhatcve 1
exploitpack 1
exploitdb 1
packetstorm 1
zdt 1
cnvd 2
githubexploit 2
fedora 3
osv
osv
check-mk vulnerabilities
2022-07-20 10:26:46
check-mk vulnerabilities
2022-07-20 08:36:48
CVE-2017-9781
2017-06-21 18:29:00
openvas
openvas
Ubuntu: Security Advisory (USN-5527-1)
2022-07-21 00:00:00
Ubuntu: Security Advisory (USN-5527-2)
2023-01-27 00:00:00
Check_MK Information Disclosure Vulnerability
2017-10-24 00:00:00
nessus
nessus
Ubuntu 18.04 LTS : Checkmk vulnerabilities (USN-5527-1)
2022-07-20 00:00:00
Ubuntu 16.04 ESM : Checkmk vulnerabilities (USN-5527-2)
2023-10-23 00:00:00
Check_MK < 1.4.0p6 webapi.py XSS
2017-06-28 00:00:00
ubuntu
ubuntu
Checkmk vulnerabilities
2022-07-20 00:00:00
cvelist
cvelist
CVE-2017-9781
2017-06-21 18:00:00
CVE-2017-14955
2017-10-01 05:00:00
CVE-2022-24565
2022-02-22 11:03:39
ubuntucve
ubuntucve
CVE-2017-9781
2017-06-21 00:00:00
CVE-2017-14955
2017-10-02 00:00:00
CVE-2022-24565
2022-02-24 00:00:00
prion
prion
Cross site scripting
2017-06-21 18:29:00
Race condition
2017-10-02 01:29:00
Authentication flaw
2022-03-25 23:15:00
cve
cve
CVE-2017-9781
2017-06-21 18:29:00
CVE-2017-14955
2017-10-02 01:29:00
CVE-2022-24565
2022-02-24 15:15:29
nvd
nvd
CVE-2017-14955
2017-10-02 01:29:00
CVE-2017-9781
2017-06-21 18:29:00
CVE-2021-40906
2022-03-25 23:15:08
redhatcve
redhatcve
CVE-2017-14955
2017-10-03 09:49:00
exploitpack
exploitpack
Check_MK 1.2.8p25 - Information Disclosure
2017-10-18 00:00:00
exploitdb
exploitdb
Check_MK 1.2.8p25 - Information Disclosure
2017-10-18 00:00:00
packetstorm
packetstorm
Check_mk 1.2.8p25 save_users() Race Condition
2017-10-19 00:00:00
zdt
zdt
Check_MK 1.2.8p25 - Information Disclosure Exploit
2017-10-21 00:00:00
cnvd
cnvd
Checkmk Cross-Site Scripting Vulnerability (CNVD-2022-17021)
2022-03-01 00:00:00
CheckMK management web console cross-site scripting vulnerability
2021-07-30 00:00:00
githubexploit
githubexploit
Exploit for Cross-site Scripting in Checkmk
2021-07-27 11:22:21
Exploit for Cross-site Scripting in Tribe29 Checkmk
2021-10-12 09:30:38
fedora
fedora
[SECURITY] Fedora 26 Update: check-mk-1.2.8p26-1.fc26
2017-10-23 18:52:14
[SECURITY] Fedora 25 Update: check-mk-1.2.8p26-1.fc25
2017-10-23 22:52:46
[SECURITY] Fedora 27 Update: check-mk-1.2.8p26-1.fc27
2017-10-11 14:48:44

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.015

Percentile

87.0%

JSON
Related for USN-5527-1
osv6openvas8nessus6ubuntu1cvelist5ubuntucve5prion5cve5nvd5redhatcve1exploitpack1exploitdb1packetstorm1zdt1cnvd2githubexploit2fedora3