CVE-2023-0284

Published: Jan 26, 2023Modified: Nov 21, 2024

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

Improper Input Validation of LDAP user IDs in Tribe29 Checkmk allows attackers that can control LDAP user IDs to manipulate files on the server. Checkmk <= 2.1.0p19, Checkmk <= 2.0.0p32, and all versions of Checkmk 1.6.0 (EOL) are affected.

Affected (71)

Products: Checkmk: Checkmk · Tribe29: Checkmk

1 product

1 product

Configuration A

71 vulnerable

Vulnerable Software	Affected Versions
Checkmk Checkmk	Version 2.0.0
Checkmk Checkmk	Version 2.0.0 b1
Checkmk Checkmk	Version 2.0.0 b2
Checkmk Checkmk	Version 2.0.0 b3
Checkmk Checkmk	Version 2.0.0 b4
Checkmk Checkmk	Version 2.0.0 b5
Checkmk Checkmk	Version 2.0.0 b6
Checkmk Checkmk	Version 2.0.0 b7
Checkmk Checkmk	Version 2.0.0 b8
Checkmk Checkmk	Version 2.0.0 i1
Checkmk Checkmk	Version 2.0.0 p10
Checkmk Checkmk	Version 2.0.0 p11
Checkmk Checkmk	Version 2.0.0 p12
Checkmk Checkmk	Version 2.0.0 p13
Checkmk Checkmk	Version 2.0.0 p14
Checkmk Checkmk	Version 2.0.0 p15
Checkmk Checkmk	Version 2.0.0 p16
Checkmk Checkmk	Version 2.0.0 p17
Checkmk Checkmk	Version 2.0.0 p18
Checkmk Checkmk	Version 2.0.0 p19
Checkmk Checkmk	Version 2.0.0 p1
Checkmk Checkmk	Version 2.0.0 p20
Checkmk Checkmk	Version 2.0.0 p21
Checkmk Checkmk	Version 2.0.0 p22
Checkmk Checkmk	Version 2.0.0 p23
Checkmk Checkmk	Version 2.0.0 p24
Checkmk Checkmk	Version 2.0.0 p25
Checkmk Checkmk	Version 2.0.0 p26
Checkmk Checkmk	Version 2.0.0 p27
Checkmk Checkmk	Version 2.0.0 p28
Checkmk Checkmk	Version 2.0.0 p29
Checkmk Checkmk	Version 2.0.0 p2
Checkmk Checkmk	Version 2.0.0 p30
Checkmk Checkmk	Version 2.0.0 p31
Checkmk Checkmk	Version 2.0.0 p32
Checkmk Checkmk	Version 2.0.0 p3
Checkmk Checkmk	Version 2.0.0 p4
Checkmk Checkmk	Version 2.0.0 p5
Checkmk Checkmk	Version 2.0.0 p6
Checkmk Checkmk	Version 2.0.0 p7
Checkmk Checkmk	Version 2.0.0 p8
Checkmk Checkmk	Version 2.0.0 p9
Checkmk Checkmk	Version 2.1.0 b1
Checkmk Checkmk	Version 2.1.0 b2
Checkmk Checkmk	Version 2.1.0 b3
Checkmk Checkmk	Version 2.1.0 b4
Checkmk Checkmk	Version 2.1.0 b5
Checkmk Checkmk	Version 2.1.0 b6
Checkmk Checkmk	Version 2.1.0 b7
Checkmk Checkmk	Version 2.1.0 b8
Checkmk Checkmk	Version 2.1.0 b9
Checkmk Checkmk	Version 2.1.0 p10
Checkmk Checkmk	Version 2.1.0 p11
Checkmk Checkmk	Version 2.1.0 p12
Checkmk Checkmk	Version 2.1.0 p13
Checkmk Checkmk	Version 2.1.0 p14
Checkmk Checkmk	Version 2.1.0 p15
Checkmk Checkmk	Version 2.1.0 p16
Checkmk Checkmk	Version 2.1.0 p17
Checkmk Checkmk	Version 2.1.0 p18
Checkmk Checkmk	Version 2.1.0 p19
Checkmk Checkmk	Version 2.1.0 p1
Checkmk Checkmk	Version 2.1.0 p2
Checkmk Checkmk	Version 2.1.0 p3
Checkmk Checkmk	Version 2.1.0 p4
Checkmk Checkmk	Version 2.1.0 p5
Checkmk Checkmk	Version 2.1.0 p6
Checkmk Checkmk	Version 2.1.0 p7
Checkmk Checkmk	Version 2.1.0 p8
Checkmk Checkmk	Version 2.1.0 p9
Tribe29 Checkmk	From 1.6.0 to 2.0.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://checkmk.com/werk/15181

Source: security@checkmk.com

Vendor Advisory

https://checkmk.com/werk/15181

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.