Approved changes feed: RSS · Atom
cpe:2.3:a:checkmk:checkmk:2.1.0:*:*:*:*:*:*:*
part: a version: 2.1.0 update: *
| Vendor | Checkmk (4c044dbb-9ac1-5f9f-8fc3-779e7e40680c) |
|---|---|
| Product | Checkmk (d6ac166c-ac22-5bed-9805-e6ff22774734) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-64996 |
vulnerable | 2026-06-08 07:39:20.429999 |
Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output
In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mk_inotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially leading to unauthorized access to or modification of monitoring data.
Published: 2025-11-18T15:10:53.398Z
Updated: 2025-11-18T21:23:15.114Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32918 |
vulnerable | 2026-06-08 07:19:01.140830 |
Livestatus injection in autocomplete endpoint
Improper neutralization of Livestatus command delimiters in autocomplete endpoint within the RestAPI of Checkmk versions <2.4.0p6, <2.3.0p35, <2.2.0p44, and 2.1.0 (EOL) allows an authenticated user to inject arbitrary Livestatus commands.
Published: 2025-07-04T08:12:21.950Z
Updated: 2025-07-08T14:20:25.426Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47094 |
vulnerable | 2026-06-08 06:48:11.286078 |
Logging of sitesecret to automations log
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p22, <2.2.0p37, <2.1.0p50 (EOL) causes remote site secrets to be written to web log files accessible to local site users.
Published: 2024-11-29T09:52:18.988Z
Updated: 2025-09-11T07:16:20.513Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3367 |
vulnerable | 2026-06-08 06:41:53.024925 |
Argument injection to runmqsc
MEDIUM (6.5)
Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p26 and <2.3.0b5 allows local attacker to inject one argument to runmqsc
Published: 2024-04-16T11:59:43.845Z
Updated: 2024-08-26T09:48:37.438Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28827 |
vulnerable | 2026-06-08 06:33:27.540923 |
Privilege escalation in Windows agent
HIGH (8.8)
Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p8, < 2.2.0p29, < 2.1.0p45, and <= 2.0.0p39 (EOL) allows a local attacker to gain SYSTEM privileges.
Published: 2024-07-10T12:41:04.948Z
Updated: 2024-08-02T00:56:58.208Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28826 |
vulnerable | 2026-06-08 06:33:27.518247 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28825 |
vulnerable | 2026-06-08 06:33:27.493299 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.