Approved changes feed: RSS · Atom

cpe:2.3:a:checkmk:checkmk:2.1.0:p43:*:*:*:*:*:*

part: a version: 2.1.0 update: p43

VendorCheckmk (4c044dbb-9ac1-5f9f-8fc3-779e7e40680c)
ProductCheckmk (d6ac166c-ac22-5bed-9805-e6ff22774734)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/tribe29/checkmk purl2cpe 2026-06-01 10:16:57.757951

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-32917 vulnerable 2026-06-08 07:19:01.118682 Privilege escalation in jar_signature
Privilege escalation in jar_signature agent plugin in Checkmk versions <2.4.0b7 (beta), <2.3.0p32, <2.2.0p42, and 2.1.0p49 (EOL) allow user with write access to JAVA_HOME/bin directory to escalate privileges.
Published: 2025-05-13T10:45:31.406Z
Updated: 2025-05-13T13:05:57.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32915 vulnerable 2026-06-08 07:19:00.995428 Sensitive data exposed during automatic agent updates
Packages downloaded by Checkmk's automatic agent updates on Linux and Solaris have incorrect permissions in Checkmk < 2.4.0p1, < 2.3.0p32, < 2.2.0p42 and <= 2.1.0p49 (EOL). This allows a local attacker to read sensitive data.
Published: 2025-05-22T14:16:01.214Z
Updated: 2025-05-22T14:48:38.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2596 vulnerable 2026-06-08 07:16:57.695787 Session logout can be overwritten by long lasting request
Session logout could be overwritten in Checkmk GmbH's Checkmk versions <2.3.0p30, <2.2.0p41, and 2.1.0p49 (EOL)
Published: 2025-03-26T10:51:16.285Z
Updated: 2025-03-26T17:36:08.128Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2092 vulnerable 2026-06-08 07:14:57.933443 Remote site authentication secrets written to web log
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p29, <2.2.0p41 and <=2.1.0p49 (EOL) causes remote site authentication secrets to be written to log files accessible to administrators.
Published: 2025-04-22T11:38:04.092Z
Updated: 2025-04-22T13:08:31.297Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1075 vulnerable 2026-06-08 07:06:36.796628 LDAP credentials logged to Apache error log
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p27, <2.2.0p40, and 2.1.0p51 (EOL) causes LDAP credentials to be written to Apache error log file accessible to administrators.
Published: 2025-02-19T09:49:55.695Z
Updated: 2025-11-13T12:54:20.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6747 vulnerable 2026-06-08 06:58:20.308847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6572 vulnerable 2026-06-08 06:58:19.883332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6542 vulnerable 2026-06-08 06:58:19.783582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6163 vulnerable 2026-06-08 06:58:18.012793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6052 vulnerable 2026-06-08 06:58:17.506308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5741 vulnerable 2026-06-08 06:56:17.192661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38865 vulnerable 2026-06-08 06:41:48.441592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38864 vulnerable 2026-06-08 06:41:48.395599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38863 vulnerable 2026-06-08 06:41:48.390116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38862 vulnerable 2026-06-08 06:41:48.368457 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38859 vulnerable 2026-06-08 06:41:48.326250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38857 vulnerable 2026-06-08 06:41:48.270768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28832 vulnerable 2026-06-08 06:33:27.684709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28830 vulnerable 2026-06-08 06:33:27.665049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28829 vulnerable 2026-06-08 06:33:27.619586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28828 vulnerable 2026-06-08 06:33:27.612806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28827 vulnerable 2026-06-08 06:33:27.543811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28826 vulnerable 2026-06-08 06:33:27.527547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.