checkmk 1.6.0 Patch 29
Approved changes feed: RSS · Atom
cpe:2.3:a:checkmk:checkmk:1.6.0:p29:*:*:*:*:*:*
part: a version: 1.6.0 update: p29
| Vendor | Checkmk (4c044dbb-9ac1-5f9f-8fc3-779e7e40680c) |
|---|---|
| Product | Checkmk (d6ac166c-ac22-5bed-9805-e6ff22774734) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/tribe29/checkmk |
purl2cpe | 2026-06-01 10:16:57.741748 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-1768 |
vulnerable | 2026-06-08 05:52:36.949208 |
Symmetric agent data encryption fails silently
LOW (3.7)
Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.
Published: 2023-04-04T06:30:29.538Z
Updated: 2025-02-11T17:07:22.757Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48320 |
vulnerable | 2026-06-08 05:51:34.251028 |
CSRF in add-visual endpoint
MEDIUM (5.4)
Cross-site Request Forgery (CSRF) in Tribe29's Checkmk <= 2.1.0p17, Checkmk <= 2.0.0p31, and all versions of Checkmk 1.6.0 (EOL) allow an attacker to add new visual elements to multiple pages.
Published: 2023-02-20T16:56:40.889Z
Updated: 2025-03-12T18:10:01.870Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48319 |
vulnerable | 2026-06-08 05:51:34.223519 |
Host secret disclosed in Checkmk logs
MEDIUM (6.5)
Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to gain access to the host secret through the unprotected agent updater log file.
Published: 2023-02-20T16:56:18.397Z
Updated: 2025-03-12T14:00:50.779Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47909 |
vulnerable | 2026-06-08 05:50:40.964073 |
LQL Injection in Livestatus HTTP headers
MEDIUM (6.8)
Livestatus Query Language (LQL) injection in the AuthUser HTTP query header of Tribe29's Checkmk <= 2.1.0p11, Checkmk <= 2.0.0p28, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to perform direct queries to the application's core from localhost.
Published: 2023-02-20T16:53:37.606Z
Updated: 2024-08-03T15:02:36.627Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46836 |
vulnerable | 2026-06-08 05:50:39.600641 |
PHP code injection in watolib
CRITICAL (9.1)
PHP code injection in watolib auth.php and hosttags.php in Tribe29's Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker to inject and execute PHP code which will be executed upon request of the vulnerable component.
Published: 2023-02-20T16:52:56.912Z
Updated: 2024-08-03T14:39:39.053Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46303 |
vulnerable | 2026-06-08 05:50:38.577117 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46302 |
vulnerable | 2026-06-08 05:50:38.529890 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33912 |
vulnerable | 2026-06-08 05:44:51.709762 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.