Security Advisory

CVE-2023-0284

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-01-24 12:03:57
Last updated 2025-03-27 20:22:06
Assigner Tribe29
CVSS score 6.8
State PUBLISHED

Description

Improper Input Validation of LDAP user IDs in Tribe29 Checkmk allows attackers that can control LDAP user IDs to manipulate files on the server. Checkmk <= 2.1.0p19, Checkmk <= 2.0.0p32, and all versions of Checkmk 1.6.0 (EOL) are affected.