6.5

CVE-2023-31211

Disabled automation users could still authenticate

Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Checkmk ≫ Checkmk Version 2.0.0 Update b1
Checkmk ≫ Checkmk Version 2.0.0 Update b2
Checkmk ≫ Checkmk Version 2.0.0 Update b3
Checkmk ≫ Checkmk Version 2.0.0 Update b4
Checkmk ≫ Checkmk Version 2.0.0 Update b5
Checkmk ≫ Checkmk Version 2.0.0 Update b6
Checkmk ≫ Checkmk Version 2.0.0 Update b7
Checkmk ≫ Checkmk Version 2.0.0 Update b8
Checkmk ≫ Checkmk Version 2.0.0 Update i1
Checkmk ≫ Checkmk Version 2.0.0 Update p1
Checkmk ≫ Checkmk Version 2.0.0 Update p10
Checkmk ≫ Checkmk Version 2.0.0 Update p11
Checkmk ≫ Checkmk Version 2.0.0 Update p12
Checkmk ≫ Checkmk Version 2.0.0 Update p13
Checkmk ≫ Checkmk Version 2.0.0 Update p14
Checkmk ≫ Checkmk Version 2.0.0 Update p15
Checkmk ≫ Checkmk Version 2.0.0 Update p16
Checkmk ≫ Checkmk Version 2.0.0 Update p17
Checkmk ≫ Checkmk Version 2.0.0 Update p18
Checkmk ≫ Checkmk Version 2.0.0 Update p19
Checkmk ≫ Checkmk Version 2.0.0 Update p2
Checkmk ≫ Checkmk Version 2.0.0 Update p20
Checkmk ≫ Checkmk Version 2.0.0 Update p21
Checkmk ≫ Checkmk Version 2.0.0 Update p22
Checkmk ≫ Checkmk Version 2.0.0 Update p23
Checkmk ≫ Checkmk Version 2.0.0 Update p24
Checkmk ≫ Checkmk Version 2.0.0 Update p25
Checkmk ≫ Checkmk Version 2.0.0 Update p26
Checkmk ≫ Checkmk Version 2.0.0 Update p27
Checkmk ≫ Checkmk Version 2.0.0 Update p28
Checkmk ≫ Checkmk Version 2.0.0 Update p29
Checkmk ≫ Checkmk Version 2.0.0 Update p3
Checkmk ≫ Checkmk Version 2.0.0 Update p30
Checkmk ≫ Checkmk Version 2.0.0 Update p31
Checkmk ≫ Checkmk Version 2.0.0 Update p32
Checkmk ≫ Checkmk Version 2.0.0 Update p33
Checkmk ≫ Checkmk Version 2.0.0 Update p34
Checkmk ≫ Checkmk Version 2.0.0 Update p35
Checkmk ≫ Checkmk Version 2.0.0 Update p36
Checkmk ≫ Checkmk Version 2.0.0 Update p37
Checkmk ≫ Checkmk Version 2.0.0 Update p38
Checkmk ≫ Checkmk Version 2.0.0 Update p4
Checkmk ≫ Checkmk Version 2.0.0 Update p5
Checkmk ≫ Checkmk Version 2.0.0 Update p6
Checkmk ≫ Checkmk Version 2.0.0 Update p7
Checkmk ≫ Checkmk Version 2.0.0 Update p8
Checkmk ≫ Checkmk Version 2.0.0 Update p9
Checkmk ≫ Checkmk Version 2.1.0 Update -
Checkmk ≫ Checkmk Version 2.1.0 Update b1
Checkmk ≫ Checkmk Version 2.1.0 Update b2
Checkmk ≫ Checkmk Version 2.1.0 Update b3
Checkmk ≫ Checkmk Version 2.1.0 Update b4
Checkmk ≫ Checkmk Version 2.1.0 Update b5
Checkmk ≫ Checkmk Version 2.1.0 Update b6
Checkmk ≫ Checkmk Version 2.1.0 Update b7
Checkmk ≫ Checkmk Version 2.1.0 Update b8
Checkmk ≫ Checkmk Version 2.1.0 Update b9
Checkmk ≫ Checkmk Version 2.1.0 Update p1
Checkmk ≫ Checkmk Version 2.1.0 Update p10
Checkmk ≫ Checkmk Version 2.1.0 Update p11
Checkmk ≫ Checkmk Version 2.1.0 Update p12
Checkmk ≫ Checkmk Version 2.1.0 Update p13
Checkmk ≫ Checkmk Version 2.1.0 Update p14
Checkmk ≫ Checkmk Version 2.1.0 Update p15
Checkmk ≫ Checkmk Version 2.1.0 Update p16
Checkmk ≫ Checkmk Version 2.1.0 Update p17
Checkmk ≫ Checkmk Version 2.1.0 Update p18
Checkmk ≫ Checkmk Version 2.1.0 Update p19
Checkmk ≫ Checkmk Version 2.1.0 Update p2
Checkmk ≫ Checkmk Version 2.1.0 Update p20
Checkmk ≫ Checkmk Version 2.1.0 Update p21
Checkmk ≫ Checkmk Version 2.1.0 Update p22
Checkmk ≫ Checkmk Version 2.1.0 Update p23
Checkmk ≫ Checkmk Version 2.1.0 Update p24
Checkmk ≫ Checkmk Version 2.1.0 Update p25
Checkmk ≫ Checkmk Version 2.1.0 Update p26
Checkmk ≫ Checkmk Version 2.1.0 Update p27
Checkmk ≫ Checkmk Version 2.1.0 Update p28
Checkmk ≫ Checkmk Version 2.1.0 Update p29
Checkmk ≫ Checkmk Version 2.1.0 Update p3
Checkmk ≫ Checkmk Version 2.1.0 Update p30
Checkmk ≫ Checkmk Version 2.1.0 Update p31
Checkmk ≫ Checkmk Version 2.1.0 Update p32
Checkmk ≫ Checkmk Version 2.1.0 Update p33
Checkmk ≫ Checkmk Version 2.1.0 Update p34
Checkmk ≫ Checkmk Version 2.1.0 Update p35
Checkmk ≫ Checkmk Version 2.1.0 Update p36
Checkmk ≫ Checkmk Version 2.1.0 Update p37
Checkmk ≫ Checkmk Version 2.1.0 Update p4
Checkmk ≫ Checkmk Version 2.1.0 Update p5
Checkmk ≫ Checkmk Version 2.1.0 Update p6
Checkmk ≫ Checkmk Version 2.1.0 Update p7
Checkmk ≫ Checkmk Version 2.1.0 Update p8
Checkmk ≫ Checkmk Version 2.1.0 Update p9
Checkmk ≫ Checkmk Version 2.2.0 Update -
Checkmk ≫ Checkmk Version 2.2.0 Update b1
Checkmk ≫ Checkmk Version 2.2.0 Update b2
Checkmk ≫ Checkmk Version 2.2.0 Update b3
Checkmk ≫ Checkmk Version 2.2.0 Update b4
Checkmk ≫ Checkmk Version 2.2.0 Update b5
Checkmk ≫ Checkmk Version 2.2.0 Update b6
Checkmk ≫ Checkmk Version 2.2.0 Update b7
Checkmk ≫ Checkmk Version 2.2.0 Update b8
Checkmk ≫ Checkmk Version 2.2.0 Update i1
Checkmk ≫ Checkmk Version 2.2.0 Update p1
Checkmk ≫ Checkmk Version 2.2.0 Update p10
Checkmk ≫ Checkmk Version 2.2.0 Update p11
Checkmk ≫ Checkmk Version 2.2.0 Update p12
Checkmk ≫ Checkmk Version 2.2.0 Update p13
Checkmk ≫ Checkmk Version 2.2.0 Update p14
Checkmk ≫ Checkmk Version 2.2.0 Update p15
Checkmk ≫ Checkmk Version 2.2.0 Update p16
Checkmk ≫ Checkmk Version 2.2.0 Update p17
Checkmk ≫ Checkmk Version 2.2.0 Update p2
Checkmk ≫ Checkmk Version 2.2.0 Update p3
Checkmk ≫ Checkmk Version 2.2.0 Update p4
Checkmk ≫ Checkmk Version 2.2.0 Update p5
Tribe29 ≫ Checkmk Version <= 2.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.51% 0.392
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
security@checkmk.com 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-303 Incorrect Implementation of Authentication Algorithm

The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.

CWE-670 Always-Incorrect Control Flow Implementation

The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

https://checkmk.com/werk/16227
Patch
Vendor Advisory