WID-SEC-W-2024-1587

DeutschShown in its original language — a full translation is planned for a future version.

Checkmk: Mehrere Schwachstellen

view advisory published 2024-07-10

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um seine Privilegien zu erhöhen oder Sicherheitsmaßnahmen zu umgehen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-28828US	high8.8	0.25% (16th)	—	2024-07-10
Cross-Site request forgery in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) could lead to 1-click compromize of the site.
CVE-2024-28827US	high7.8	0.17% (6th)	—	2024-07-10
Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) allows a local attacker to gain SYSTEM privi…

references

External citations — patches, advisories, analysis.

Checkmk Werk #16845 vom 2024-07-10external
Checkmk Werk #17090 vom 2024-07-10external
WID-SEC-W-2024-1587 - CSAF Versionself
WID-SEC-2024-1587 - Portal Versionself
Tenable Advisory vom 2024-07-10external
Tenable Advisory vom 2024-07-10external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan