Security Advisory

CVE-2023-0284

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-01-24 12:03:57
Last updated 2025-03-27 20:22:06
Assigner Tribe29
State PUBLISHED

Description

Improper Input Validation of LDAP user IDs in Tribe29 Checkmk allows attackers that can control LDAP user IDs to manipulate files on the server. Checkmk <= 2.1.0p19, Checkmk <= 2.0.0p32, and all versions of Checkmk 1.6.0 (EOL) are affected.