CVE-2023-0284

8.1 highEPSS 0.9%

High (8.1). EPSS 0.9% chance of exploitation in the next 30 days.

Improper Input Validation of LDAP user IDs in Tribe29 Checkmk allows attackers that can control LDAP user IDs to manipulate files on the server. Checkmk <= 2.1.0p19, Checkmk <= 2.0.0p32, and all versions of Checkmk 1.6.0 (EOL) are affected.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2023-01-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

checkmk:checkmk
tribe29:checkmk

References

https://checkmk.com/werk/15181
https://checkmk.com/werk/15181

Check your stack JSON