Limited Server-Side Request Forgery (SSRF) in agent-receiver in Tribe29s Checkmk <= 2.1.0p11 allows an attacker to communicate with local network restricted endpoints by use of the host registration API.
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Checkmk | Tribe29 | 2.1.0 (including) | 2.1.0 (including) |
| Checkmk | Tribe29 | 2.1.0-b1 (including) | 2.1.0-b1 (including) |
| Checkmk | Tribe29 | 2.1.0-b2 (including) | 2.1.0-b2 (including) |
| Checkmk | Tribe29 | 2.1.0-b3 (including) | 2.1.0-b3 (including) |
| Checkmk | Tribe29 | 2.1.0-b4 (including) | 2.1.0-b4 (including) |
| Checkmk | Tribe29 | 2.1.0-b5 (including) | 2.1.0-b5 (including) |
| Checkmk | Tribe29 | 2.1.0-b6 (including) | 2.1.0-b6 (including) |
| Checkmk | Tribe29 | 2.1.0-b7 (including) | 2.1.0-b7 (including) |
| Checkmk | Tribe29 | 2.1.0-b8 (including) | 2.1.0-b8 (including) |
| Checkmk | Tribe29 | 2.1.0-b9 (including) | 2.1.0-b9 (including) |
| Checkmk | Tribe29 | 2.1.0-p1 (including) | 2.1.0-p1 (including) |
| Checkmk | Tribe29 | 2.1.0-p10 (including) | 2.1.0-p10 (including) |
| Checkmk | Tribe29 | 2.1.0-p11 (including) | 2.1.0-p11 (including) |
| Checkmk | Tribe29 | 2.1.0-p2 (including) | 2.1.0-p2 (including) |
| Checkmk | Tribe29 | 2.1.0-p3 (including) | 2.1.0-p3 (including) |
| Checkmk | Tribe29 | 2.1.0-p4 (including) | 2.1.0-p4 (including) |
| Checkmk | Tribe29 | 2.1.0-p5 (including) | 2.1.0-p5 (including) |
| Checkmk | Tribe29 | 2.1.0-p6 (including) | 2.1.0-p6 (including) |
| Checkmk | Tribe29 | 2.1.0-p7 (including) | 2.1.0-p7 (including) |
| Checkmk | Tribe29 | 2.1.0-p8 (including) | 2.1.0-p8 (including) |
| Checkmk | Tribe29 | 2.1.0-p9 (including) | 2.1.0-p9 (including) |