PT-2023-19031 · Checkmk · Checkmk

Published 2023-11-15 · Updated 2024-08-26 · CVE-2023-23549

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.2.0p15 Checkmk versions prior to 2.1.0p37 Checkmk versions prior to 2.0.0p40

Description The issue is related to improper input validation, allowing privileged attackers to cause a partial denial of service of the UI by using too long hostnames.

Recommendations For versions prior to 2.2.0p15, update to version 2.2.0p15 or later. For versions prior to 2.1.0p37, update to version 2.1.0p37 or later. For versions prior to 2.0.0p40, update to version 2.0.0p40 or later.

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2023-23549

Affected Products

Checkmk

References · 6

• https://cve.org/CVERecord?id=CVE-2023-23549 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-23549 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-23549 · Vendor Advisory
• https://checkmk.com/werk/16219 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-23549 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-23549 · Vendor Advisory