GCVE - cpe:2.3:a:checkmk:checkmk:1.6.0:p30:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:checkmk:checkmk:1.6.0:p30:*:*:*:*:*:*

part: a version: 1.6.0 update: p30

Vendor	Checkmk (`4c044dbb-9ac1-5f9f-8fc3-779e7e40680c`)
Product	Checkmk (`d6ac166c-ac22-5bed-9805-e6ff22774734`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/tribe29/checkmk`	purl2cpe	2026-06-01 10:16:57.741751

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-48320`	vulnerable	2026-06-08 05:51:34.251229	CSRF in add-visual endpoint MEDIUM (5.4) Cross-site Request Forgery (CSRF) in Tribe29's Checkmk <= 2.1.0p17, Checkmk <= 2.0.0p31, and all versions of Checkmk 1.6.0 (EOL) allow an attacker to add new visual elements to multiple pages. Published: 2023-02-20T16:56:40.889Z Updated: 2025-03-12T18:10:01.870Z Open on db.gcve.eu Reference links https://checkmk.com/werk/14924	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-48319`	vulnerable	2026-06-08 05:51:34.224847	Host secret disclosed in Checkmk logs MEDIUM (6.5) Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to gain access to the host secret through the unprotected agent updater log file. Published: 2023-02-20T16:56:18.397Z Updated: 2025-03-12T14:00:50.779Z Open on db.gcve.eu Reference links https://checkmk.com/werk/14916	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-47909`	vulnerable	2026-06-08 05:50:40.964203	LQL Injection in Livestatus HTTP headers MEDIUM (6.8) Livestatus Query Language (LQL) injection in the AuthUser HTTP query header of Tribe29's Checkmk <= 2.1.0p11, Checkmk <= 2.0.0p28, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to perform direct queries to the application's core from localhost. Published: 2023-02-20T16:53:37.606Z Updated: 2024-08-03T15:02:36.627Z Open on db.gcve.eu Reference links https://checkmk.com/werk/14384 https://www.sonarsource.com/blog/checkmk-rce-chain-1/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-46302`	vulnerable	2026-06-08 05:50:38.530601	Remote Code Execution with Root Privileges via Broad Apache Permissions HIGH (8.8) Broad access controls could allow site users to directly interact with the system Apache installation when providing the reverse proxy configurations for Tribe29's Checkmk <= 2.1.0p6, Checkmk <= 2.0.0p27, and all versions of Checkmk 1.6.0 (EOL) allowing an attacker to perform remote code execution with root privileges on the underlying host. Published: 2023-04-20T13:06:30.238Z Updated: 2025-02-04T21:43:19.638Z Open on db.gcve.eu Reference links https://checkmk.com/werk/14281	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.