CVE-2022-48321

Limited Server-Side Request Forgery (SSRF) in agent-receiver in Tribe29's Checkmk <= 2.1.0p11 allows an attacker to communicate with local network restricted endpoints by use of the host registration API.

Score

CVSS 3.1 6.8 Medium

Status

Modified - security@checkmk.com

Published

2023-02-20

Last modified

2024-08-03

Weaknesses

CWE-20, CWE-918

Affected products

• Checkmk (Checkmk)
• Checkmk (Tribe29)

References

• https://checkmk.com/werk/14385
• https://www.sonarsource.com/blog/checkmk-rce-chain-1/