CVE-2023-22359: User-enumeration in RestAPI
First published: Mon Jun 26 2023(Updated: )
User enumeration in Checkmk <=2.2.0p4 allows an authenticated attacker to enumerate usernames.
Credit: security@checkmk.com security@checkmk.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tribe29 Checkmk | =2.2.0 | |
| Tribe29 Checkmk | =2.2.0-b1 | |
| Tribe29 Checkmk | =2.2.0-b2 | |
| Tribe29 Checkmk | =2.2.0-b3 | |
| Tribe29 Checkmk | =2.2.0-b4 | |
| Tribe29 Checkmk | =2.2.0-b5 | |
| Tribe29 Checkmk | =2.2.0-b6 | |
| Tribe29 Checkmk | =2.2.0-b7 | |
| Tribe29 Checkmk | =2.2.0-b8 | |
| Tribe29 Checkmk | =2.2.0-i1 | |
| Tribe29 Checkmk | =2.2.0-p1 | |
| Tribe29 Checkmk | =2.2.0-p2 | |
| Tribe29 Checkmk | =2.2.0-p3 | |
| Tribe29 Checkmk | =2.2.0-p4 | |
| Checkmk Checkmk | =2.2.0 | |
| Checkmk Checkmk | =2.2.0-b1 | |
| Checkmk Checkmk | =2.2.0-b2 | |
| Checkmk Checkmk | =2.2.0-b3 | |
| Checkmk Checkmk | =2.2.0-b4 | |
| Checkmk Checkmk | =2.2.0-b5 | |
| Checkmk Checkmk | =2.2.0-b6 | |
| Checkmk Checkmk | =2.2.0-b7 | |
| Checkmk Checkmk | =2.2.0-b8 | |
| Checkmk Checkmk | =2.2.0-i1 | |
| Checkmk Checkmk | =2.2.0-p1 | |
| Checkmk Checkmk | =2.2.0-p2 | |
| Checkmk Checkmk | =2.2.0-p3 | |
| Checkmk Checkmk | =2.2.0-p4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-22359?
CVE-2023-22359 is a vulnerability in Checkmk <=2.2.0p4 that allows an authenticated attacker to enumerate usernames.
How severe is CVE-2023-22359?
CVE-2023-22359 has a severity rating of medium with a CVSS score of 4.3.
Which versions of Checkmk are affected by CVE-2023-22359?
Checkmk versions 2.2.0 up to and including 2.2.0p4 are affected by CVE-2023-22359.
How can an attacker exploit CVE-2023-22359?
An authenticated attacker can exploit CVE-2023-22359 to enumerate usernames in Checkmk.
Is there a fix for CVE-2023-22359?
Yes, a fix for CVE-2023-22359 is available. It is recommended to update to a version of Checkmk that is not affected by the vulnerability.
- collector/nvd-index
- agent/type
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/references
- agent/weakness
- agent/description
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/last-modified-date
- agent/severity
- agent/first-publish-date
- agent/tags
- agent/event
- vendor/tribe29
- canonical/tribe29 checkmk
- version/tribe29 checkmk/2.2.0
- version/tribe29 checkmk/2.2.0-b1
- version/tribe29 checkmk/2.2.0-b2
- version/tribe29 checkmk/2.2.0-b3
- version/tribe29 checkmk/2.2.0-b4
- version/tribe29 checkmk/2.2.0-b5
- version/tribe29 checkmk/2.2.0-b6
- version/tribe29 checkmk/2.2.0-b7
- version/tribe29 checkmk/2.2.0-b8
- version/tribe29 checkmk/2.2.0-i1
- version/tribe29 checkmk/2.2.0-p1
- version/tribe29 checkmk/2.2.0-p2
- version/tribe29 checkmk/2.2.0-p3
- version/tribe29 checkmk/2.2.0-p4
- vendor/checkmk
- canonical/checkmk checkmk
- version/checkmk checkmk/2.2.0
- version/checkmk checkmk/2.2.0-b1
- version/checkmk checkmk/2.2.0-b2
- version/checkmk checkmk/2.2.0-b3
- version/checkmk checkmk/2.2.0-b4
- version/checkmk checkmk/2.2.0-b5
- version/checkmk checkmk/2.2.0-b6
- version/checkmk checkmk/2.2.0-b7
- version/checkmk checkmk/2.2.0-b8
- version/checkmk checkmk/2.2.0-i1
- version/checkmk checkmk/2.2.0-p1
- version/checkmk checkmk/2.2.0-p2
- version/checkmk checkmk/2.2.0-p3
- version/checkmk checkmk/2.2.0-p4