Approved changes feed: RSS · Atom

cpe:2.3:a:checkmk:checkmk:2.1.0:p40:*:*:*:*:*:*

part: a version: 2.1.0 update: p40

VendorCheckmk (4c044dbb-9ac1-5f9f-8fc3-779e7e40680c)
ProductCheckmk (d6ac166c-ac22-5bed-9805-e6ff22774734)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/tribe29/checkmk purl2cpe 2026-06-01 10:16:57.757947

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32917 vulnerable 2026-06-08 07:19:01.118545 Privilege escalation in jar_signature
Privilege escalation in jar_signature agent plugin in Checkmk versions <2.4.0b7 (beta), <2.3.0p32, <2.2.0p42, and 2.1.0p49 (EOL) allow user with write access to JAVA_HOME/bin directory to escalate privileges.
Published: 2025-05-13T10:45:31.406Z
Updated: 2025-05-13T13:05:57.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32915 vulnerable 2026-06-08 07:19:00.993358 Sensitive data exposed during automatic agent updates
Packages downloaded by Checkmk's automatic agent updates on Linux and Solaris have incorrect permissions in Checkmk < 2.4.0p1, < 2.3.0p32, < 2.2.0p42 and <= 2.1.0p49 (EOL). This allows a local attacker to read sensitive data.
Published: 2025-05-22T14:16:01.214Z
Updated: 2025-05-22T14:48:38.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2596 vulnerable 2026-06-08 07:16:57.693516 Session logout can be overwritten by long lasting request
Session logout could be overwritten in Checkmk GmbH's Checkmk versions <2.3.0p30, <2.2.0p41, and 2.1.0p49 (EOL)
Published: 2025-03-26T10:51:16.285Z
Updated: 2025-03-26T17:36:08.128Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2092 vulnerable 2026-06-08 07:14:57.931286 Remote site authentication secrets written to web log
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p29, <2.2.0p41 and <=2.1.0p49 (EOL) causes remote site authentication secrets to be written to log files accessible to administrators.
Published: 2025-04-22T11:38:04.092Z
Updated: 2025-04-22T13:08:31.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1075 vulnerable 2026-06-08 07:06:36.794503 LDAP credentials logged to Apache error log
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p27, <2.2.0p40, and 2.1.0p51 (EOL) causes LDAP credentials to be written to Apache error log file accessible to administrators.
Published: 2025-02-19T09:49:55.695Z
Updated: 2025-11-13T12:54:20.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6747 vulnerable 2026-06-08 06:58:20.308593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6572 vulnerable 2026-06-08 06:58:19.883001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6542 vulnerable 2026-06-08 06:58:19.783407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6163 vulnerable 2026-06-08 06:58:18.012629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6052 vulnerable 2026-06-08 06:58:17.503731 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5741 vulnerable 2026-06-08 06:56:17.187484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38865 vulnerable 2026-06-08 06:41:48.441469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38864 vulnerable 2026-06-08 06:41:48.395544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38863 vulnerable 2026-06-08 06:41:48.390056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38862 vulnerable 2026-06-08 06:41:48.368399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38859 vulnerable 2026-06-08 06:41:48.326107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38857 vulnerable 2026-06-08 06:41:48.268997 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28832 vulnerable 2026-06-08 06:33:27.684494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28830 vulnerable 2026-06-08 06:33:27.664904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28829 vulnerable 2026-06-08 06:33:27.619405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28828 vulnerable 2026-06-08 06:33:27.612655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28827 vulnerable 2026-06-08 06:33:27.543603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28826 vulnerable 2026-06-08 06:33:27.520891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28825 vulnerable 2026-06-08 06:33:27.497849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28824 vulnerable 2026-06-08 06:33:27.448392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1742 vulnerable 2026-06-08 06:27:14.331213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0638 vulnerable 2026-06-08 06:22:01.561820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.