CVE-2022-48320

Cross-site Request Forgery (CSRF) in Tribe29's Checkmk <= 2.1.0p17, Checkmk <= 2.0.0p31, and all versions of Checkmk 1.6.0 (EOL) allow an attacker to add new visual elements to multiple pages.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.4 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CheckmkCNA
5.4 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 27%
VendorProductVersion
checkmkcheckmk
2.1.0
checkmkcheckmk
2.1.0:b1
checkmkcheckmk
2.1.0:b2
checkmkcheckmk
2.1.0:b3
checkmkcheckmk
2.1.0:b4
checkmkcheckmk
2.1.0:b5
checkmkcheckmk
2.1.0:b6
checkmkcheckmk
2.1.0:b7
checkmkcheckmk
2.1.0:b8
checkmkcheckmk
2.1.0:b9
checkmkcheckmk
2.1.0:p1
checkmkcheckmk
2.1.0:p10
checkmkcheckmk
2.1.0:p11
checkmkcheckmk
2.1.0:p12
checkmkcheckmk
2.1.0:p13
checkmkcheckmk
2.1.0:p14
checkmkcheckmk
2.1.0:p15
checkmkcheckmk
2.1.0:p16
checkmkcheckmk
2.1.0:p17
checkmkcheckmk
2.1.0:p2
checkmkcheckmk
2.1.0:p3
checkmkcheckmk
2.1.0:p4
checkmkcheckmk
2.1.0:p5
checkmkcheckmk
2.1.0:p6
checkmkcheckmk
2.1.0:p7
checkmkcheckmk
2.1.0:p8
checkmkcheckmk
2.1.0:p9
checkmkcheckmk
2.0.0
checkmkcheckmk
2.0.0:b1
checkmkcheckmk
2.0.0:b2
checkmkcheckmk
2.0.0:b3
checkmkcheckmk
2.0.0:b4
checkmkcheckmk
2.0.0:b5
checkmkcheckmk
2.0.0:b6
checkmkcheckmk
2.0.0:b7
checkmkcheckmk
2.0.0:b8
checkmkcheckmk
2.0.0:i1
checkmkcheckmk
2.0.0:p1
checkmkcheckmk
2.0.0:p10
checkmkcheckmk
2.0.0:p11
checkmkcheckmk
2.0.0:p12
checkmkcheckmk
2.0.0:p13
checkmkcheckmk
2.0.0:p14
checkmkcheckmk
2.0.0:p15
checkmkcheckmk
2.0.0:p16
checkmkcheckmk
2.0.0:p17
checkmkcheckmk
2.0.0:p18
checkmkcheckmk
2.0.0:p19
checkmkcheckmk
2.0.0:p2
checkmkcheckmk
2.0.0:p20
checkmkcheckmk
2.0.0:p21
checkmkcheckmk
2.0.0:p22
checkmkcheckmk
2.0.0:p23
checkmkcheckmk
2.0.0:p24
checkmkcheckmk
2.0.0:p25
checkmkcheckmk
2.0.0:p26
checkmkcheckmk
2.0.0:p27
checkmkcheckmk
2.0.0:p28
checkmkcheckmk
2.0.0:p29
checkmkcheckmk
2.0.0:p3
checkmkcheckmk
2.0.0:p30
checkmkcheckmk
2.0.0:p31
checkmkcheckmk
2.0.0:p4
checkmkcheckmk
2.0.0:p5
checkmkcheckmk
2.0.0:p6
checkmkcheckmk
2.0.0:p7
checkmkcheckmk
2.0.0:p8
checkmkcheckmk
2.0.0:p9
checkmkcheckmk
1.6.0
checkmkcheckmk
1.6.0:b1
checkmkcheckmk
1.6.0:b10
checkmkcheckmk
1.6.0:b11
checkmkcheckmk
1.6.0:b12
checkmkcheckmk
1.6.0:b2
checkmkcheckmk
1.6.0:b3
checkmkcheckmk
1.6.0:b4
checkmkcheckmk
1.6.0:b5
checkmkcheckmk
1.6.0:b6
checkmkcheckmk
1.6.0:b7
checkmkcheckmk
1.6.0:b8
checkmkcheckmk
1.6.0:b9
checkmkcheckmk
1.6.0:p1
checkmkcheckmk
1.6.0:p10
checkmkcheckmk
1.6.0:p11
checkmkcheckmk
1.6.0:p12
checkmkcheckmk
1.6.0:p13
checkmkcheckmk
1.6.0:p14
checkmkcheckmk
1.6.0:p15
checkmkcheckmk
1.6.0:p16
checkmkcheckmk
1.6.0:p17
checkmkcheckmk
1.6.0:p18
checkmkcheckmk
1.6.0:p19
checkmkcheckmk
1.6.0:p2
checkmkcheckmk
1.6.0:p20
checkmkcheckmk
1.6.0:p21
checkmkcheckmk
1.6.0:p22
checkmkcheckmk
1.6.0:p23
checkmkcheckmk
1.6.0:p24
checkmkcheckmk
1.6.0:p25
checkmkcheckmk
1.6.0:p26
checkmkcheckmk
1.6.0:p27
checkmkcheckmk
1.6.0:p28
checkmkcheckmk
1.6.0:p29
checkmkcheckmk
1.6.0:p3
checkmkcheckmk
1.6.0:p30
checkmkcheckmk
1.6.0:p4
checkmkcheckmk
1.6.0:p5
checkmkcheckmk
1.6.0:p6
checkmkcheckmk
1.6.0:p7
checkmkcheckmk
1.6.0:p8
checkmkcheckmk
1.6.0:p9
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
check-mk
kinetic
dne
jammy
dne
focal
dne
bionic
needs-triage
xenial
needs-triage
trusty
ignored