PT-2023-15694 · Checkmk · Checkmk
CVE-2022-48317
·
Publicado
2023-02-20
·
Atualizado
2024-07-23
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Checkmk versions 2.0.0p1 through 2.0.0p28
Checkmk versions 2.1.0p1 through 2.1.0p10
Description
The issue arises from the insecure termination of expired sessions in the RestAPI, allowing an attacker to utilize expired session tokens for communication.
Recommendations
For Checkmk versions 2.0.0p1 through 2.0.0p28, update to a version later than 2.0.0p28 to resolve the issue.
For Checkmk versions 2.1.0p1 through 2.1.0p10, update to a version later than 2.1.0p10 to resolve the issue.
Correção
Insufficient Session Expiration
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Checkmk