PT-2023-32577 · Checkmk · Checkmk

Port Zero · Publicado 2023-11-24 · Atualizado 2024-07-23 · CVE-2023-6251

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Baixa

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.2.0p15 Checkmk versions prior to 2.1.0p37 Checkmk versions prior to 2.0.0p40

Description The issue allows an authenticated attacker to delete user-messages for individual users due to a Cross-site Request Forgery (CSRF) flaw.

Recommendations For versions prior to 2.2.0p15, update to version 2.2.0p15 or later. For versions prior to 2.1.0p37, update to version 2.1.0p37 or later. For versions prior to 2.0.0p40, update to version 2.0.0p40 or later.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2023-6251

Produtos afetados

Checkmk

Referências · 6

• https://checkmk.com/werk/16224 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-6251 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-6251 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-6251 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2023-6251 · Nota de Segurança
• https://ubuntu.com/security/CVE-2023-6251 · Aviso do Fabricante