Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-0284
HistoryJan 26, 2023 - 12:00 a.m.

CVE-2023-0284

2023-01-2600:00:00
ubuntu.com
ubuntu.com
12
input validation
ldap
checkmk
security vulnerability
unix

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

0.001

Percentile

33.4%

Improper Input Validation of LDAP user IDs in Tribe29 Checkmk allows
attackers that can control LDAP user IDs to manipulate files on the server.
Checkmk <= 2.1.0p19, Checkmk <= 2.0.0p32, and all versions of Checkmk 1.6.0
(EOL) are affected.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchcheck-mk< anyUNKNOWN
ubuntu16.04noarchcheck-mk< anyUNKNOWN

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

0.001

Percentile

33.4%

Related for UB:CVE-2023-0284