CVE-2023-31211

Summary

Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials

Affected Software

VendorProductVersion RangeStatus
Checkmk GmbHCheckmk2.2.0 < 2.2.0p18affected
Checkmk GmbHCheckmk2.1.0 < 2.1.0p38affected
Checkmk GmbHCheckmk2.0.0 <= 2.0.0p39affected

Weaknesses

  • CWE-303: CWE-303: Incorrect Implementation of Authentication Algorithm

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References