CVE-2023-0284

Improper Input Validation of LDAP user IDs in Tribe29 Checkmk allows attackers that can control LDAP user IDs to manipulate files on the server. Checkmk <= 2.1.0p19, Checkmk <= 2.0.0p32, and all versions of Checkmk 1.6.0 (EOL) are affected.

Score

CVSS 3.1 8.1 High

Status

Modified - security@checkmk.com

Published

2023-01-26

Last modified

2025-03-27

Weaknesses

CWE-20

Affected products

• Checkmk (Checkmk)
• Checkmk (Tribe29)

References

• https://checkmk.com/werk/15181