CVE-2022-48318

Name of the Vulnerable Software and Affected Versions Checkmk versions 2.0.0 through 2.0.0p29 Checkmk versions 2.1.0 through 2.1.0p13

Description The issue is related to the lack of authorization controls in the RestAPI documentation for Checkmk, which may lead to unintended information disclosure. This happens through automatically generated user-specific tags within the Rest API documentation.

Recommendations For Checkmk versions 2.0.0 through 2.0.0p29, consider restricting access to the RestAPI documentation to minimize the risk of exploitation. For Checkmk versions 2.1.0 through 2.1.0p13, consider restricting access to the RestAPI documentation to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.