| Package | Affected versions | Patched versions |
|---|---|---|
| checkmk | = 2.2.0= 2.3.0= 2.4.0 |
SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free