CVE-2022-48321

Summary

Limited Server-Side Request Forgery (SSRF) in agent-receiver in Tribe29's Checkmk <= 2.1.0p11 allows an attacker to communicate with local network restricted endpoints by use of the host registration API.

Affected Software

VendorProductVersion RangeStatus
Tribe29Checkmk2.1.0 <= 2.1.0p11affected

Weaknesses

  • CWE-20: CWE-20 Improper Input Validation

ADP Enrichment

CVE Program Container

Additional References

References