CVE-2023-22348

MEDIUM 4.3CVE-2023-22348 · Published 17/05/2023 · updated 23/10/2026

In short

CVE-2023-22348 is a MEDIUM (CVSS 4.3) vulnerability affecting checkmk (checkmk), checkmk (tribe29).
Chance of exploitation in the next 30 days (EPSS): 0.59%, higher than 48.3% of all vulnerabilities.
Fix: update to 2.1.0 or later.

Package	Affected versions	Patched versions
checkmk checkmk	`= 2.1.0= 2.2.0`	No fix yet
checkmk tribe29	`< 2.1.0`	`2.1.0`

Description

Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.

References

checkmk.com/werk/13982 · Vendor Advisory

More vulnerabilities in checkmk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

checkmk

= 2.1.0= 2.2.0

No fix yet

checkmk

tribe29

< 2.1.0

2.1.0

More vulnerabilities in checkmk

See all →