CVE Vulnerabilities

CVE-2023-22318

Unrestricted Externally Accessible Lock

Published: May 15, 2023 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5.

Weakness

The product properly checks for the existence of a lock, but the lock can be externally controlled or influenced by an actor that is outside of the intended sphere of control.

Affected Software

Name Vendor Start Version End Version
Checkmk_appliance_firmware Tribe29 * 1.6.5 (excluding)
Check-mk Ubuntu bionic *
Check-mk Ubuntu trusty *
Check-mk Ubuntu xenial *

Potential Mitigations

References