| Package | Affected versions | Patched versions |
|---|---|---|
| checkmk | = 2.2.0= 2.3.0= 2.4.0 |
Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows unauthenticated users to enumerate existing hosts by observing different HTTP response codes in deploy_agent endpoint, which could lead to information disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free