Approved changes feed: RSS · Atom
cpe:2.3:a:checkmk:checkmk:2.3.0:*:*:*:*:*:*:*
part: a version: 2.3.0 update: *
| Vendor | Checkmk (4c044dbb-9ac1-5f9f-8fc3-779e7e40680c) |
|---|---|
| Product | Checkmk (d6ac166c-ac22-5bed-9805-e6ff22774734) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-65000 |
vulnerable | 2026-06-08 07:39:20.599044 |
Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule
SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed.
Published: 2025-12-18T14:04:12.809Z
Updated: 2025-12-18T15:28:51.856Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58121 |
vulnerable | 2026-06-08 07:35:17.231374 |
Insufficient permission validation on multiple REST API endpoints
Insufficient permission validation on multiple REST API endpoints in Checkmk 2.2.0, 2.3.0, and 2.4.0 before version 2.4.0p16 allows low-privileged users to perform unauthorized actions or obtain sensitive information
Published: 2025-11-18T15:11:35.167Z
Updated: 2025-11-18T21:34:05.614Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2596 |
vulnerable | 2026-06-08 07:16:57.764532 |
Session logout can be overwritten by long lasting request
Session logout could be overwritten in Checkmk GmbH's Checkmk versions <2.3.0p30, <2.2.0p41, and 2.1.0p49 (EOL)
Published: 2025-03-26T10:51:16.285Z
Updated: 2025-03-26T17:36:08.128Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2092 |
vulnerable | 2026-06-08 07:14:57.975313 |
Remote site authentication secrets written to web log
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p29, <2.2.0p41 and <=2.1.0p49 (EOL) causes remote site authentication secrets to be written to log files accessible to administrators.
Published: 2025-04-22T11:38:04.092Z
Updated: 2025-04-22T13:08:31.297Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1712 |
vulnerable | 2026-06-08 07:08:37.842791 |
Arbitrary file write with vcrtrace
Argument injection in special agent configuration in Checkmk <2.4.0p1, <2.3.0p32, <2.2.0p42 and 2.1.0 allows authenticated attackers to write arbitrary files
Published: 2025-05-21T09:10:42.626Z
Updated: 2025-05-21T10:28:28.256Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3367 |
vulnerable | 2026-06-08 06:41:53.026014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38865 |
vulnerable | 2026-06-08 06:41:48.459829 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28833 |
vulnerable | 2026-06-08 06:33:27.688346 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28827 |
vulnerable | 2026-06-08 06:33:27.540978 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28826 |
vulnerable | 2026-06-08 06:33:27.518395 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-28825 |
vulnerable | 2026-06-08 06:33:27.494841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.