Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://checkmk.com/werk/13982 Vendor Advisory
- https://checkmk.com/werk/13982 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 4.3 · checkmk, tribe29NVD modified 2026-10-23 23:10
Affected (CPE criteria) 45
cpe:2.3:a:checkmk:checkmk:2.1.0:-:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:b1:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:b2:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:b3:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:b4:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:b5:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:b6:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:b7:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:b8:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:b9:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p1:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p10:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p11:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p12:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p13:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p14:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p15:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p16:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p17:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p18:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p19:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p2:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p20:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p21:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p22:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p23:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p24:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p25:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p26:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p27:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p3:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p4:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p5:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p6:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p7:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p8:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.1.0:p9:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.2.0:b1:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.2.0:b2:*:*:*:*:*:*cpe:2.3:a:checkmk:checkmk:2.2.0:b3:*:*:*:*:*:*- and 5 more
References 2
- https://checkmk.com/werk/13982 Vendor Advisory
- https://checkmk.com/werk/13982 Vendor Advisory