CVE-2022-46302

Broad access controls could allow site users to directly interact with the system Apache installation when providing the reverse proxy configurations for Tribe29's Checkmk <= 2.1.0p6, Checkmk <= 2.0.0p27, and all versions of Checkmk 1.6.0 (EOL) allowing an attacker to perform remote code execution with root privileges on the underlying host.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Tribe29CNA
8.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
VendorProductVersion
checkmkcheckmk
1.6.0
checkmkcheckmk
1.6.0:b1
checkmkcheckmk
1.6.0:b10
checkmkcheckmk
1.6.0:b11
checkmkcheckmk
1.6.0:b12
checkmkcheckmk
1.6.0:b2
checkmkcheckmk
1.6.0:b3
checkmkcheckmk
1.6.0:b4
checkmkcheckmk
1.6.0:b5
checkmkcheckmk
1.6.0:b6
checkmkcheckmk
1.6.0:b7
checkmkcheckmk
1.6.0:b8
checkmkcheckmk
1.6.0:b9
checkmkcheckmk
1.6.0:p1
checkmkcheckmk
1.6.0:p10
checkmkcheckmk
1.6.0:p11
checkmkcheckmk
1.6.0:p12
checkmkcheckmk
1.6.0:p13
checkmkcheckmk
1.6.0:p14
checkmkcheckmk
1.6.0:p15
checkmkcheckmk
1.6.0:p16
checkmkcheckmk
1.6.0:p17
checkmkcheckmk
1.6.0:p18
checkmkcheckmk
1.6.0:p19
checkmkcheckmk
1.6.0:p2
checkmkcheckmk
1.6.0:p20
checkmkcheckmk
1.6.0:p21
checkmkcheckmk
1.6.0:p22
checkmkcheckmk
1.6.0:p23
checkmkcheckmk
1.6.0:p24
checkmkcheckmk
1.6.0:p25
checkmkcheckmk
1.6.0:p26
checkmkcheckmk
1.6.0:p27
checkmkcheckmk
1.6.0:p28
checkmkcheckmk
1.6.0:p29
checkmkcheckmk
1.6.0:p30
checkmkcheckmk
2.0.0
checkmkcheckmk
2.0.0:b1
checkmkcheckmk
2.0.0:b2
checkmkcheckmk
2.0.0:b3
checkmkcheckmk
2.0.0:b4
checkmkcheckmk
2.0.0:b5
checkmkcheckmk
2.0.0:b6
checkmkcheckmk
2.0.0:b7
checkmkcheckmk
2.0.0:b8
checkmkcheckmk
2.0.0:i1
checkmkcheckmk
2.0.0:p1
checkmkcheckmk
2.0.0:p10
checkmkcheckmk
2.0.0:p11
checkmkcheckmk
2.0.0:p12
checkmkcheckmk
2.0.0:p13
checkmkcheckmk
2.0.0:p14
checkmkcheckmk
2.0.0:p15
checkmkcheckmk
2.0.0:p16
checkmkcheckmk
2.0.0:p17
checkmkcheckmk
2.0.0:p18
checkmkcheckmk
2.0.0:p19
checkmkcheckmk
2.0.0:p2
checkmkcheckmk
2.0.0:p20
checkmkcheckmk
2.0.0:p21
checkmkcheckmk
2.0.0:p22
checkmkcheckmk
2.0.0:p23
checkmkcheckmk
2.0.0:p24
checkmkcheckmk
2.0.0:p25
checkmkcheckmk
2.0.0:p26
checkmkcheckmk
2.0.0:p27
checkmkcheckmk
2.0.0:p3
checkmkcheckmk
2.0.0:p4
checkmkcheckmk
2.0.0:p5
checkmkcheckmk
2.0.0:p6
checkmkcheckmk
2.0.0:p7
checkmkcheckmk
2.0.0:p8
checkmkcheckmk
2.0.0:p9
checkmkcheckmk
2.1.0
checkmkcheckmk
2.1.0:b1
checkmkcheckmk
2.1.0:b2
checkmkcheckmk
2.1.0:b3
checkmkcheckmk
2.1.0:b4
checkmkcheckmk
2.1.0:b5
checkmkcheckmk
2.1.0:b6
checkmkcheckmk
2.1.0:b7
checkmkcheckmk
2.1.0:b8
checkmkcheckmk
2.1.0:b9
checkmkcheckmk
2.1.0:p1
checkmkcheckmk
2.1.0:p2
checkmkcheckmk
2.1.0:p3
checkmkcheckmk
2.1.0:p4
checkmkcheckmk
2.1.0:p5
checkmkcheckmk
2.1.0:p6
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
check-mk
noble
dne
mantic
dne
lunar
dne
kinetic
dne
jammy
dne
focal
dne
bionic
needs-triage
xenial
needs-triage
trusty
ignored