CVE-2024-6572 - Vulnerability Details

Vendors	Products
Checkmk	Checkmk

Link	Providers
https://checkmk.com/werk/17148

Type	Values Removed	Values Added
First Time appeared		Checkmk Checkmk checkmk
CPEs		cpe:2.3:a:checkmk:checkmk::::::::
Vendors & Products		Checkmk Checkmk checkmk
Metrics		cvssV3_1 `{'score': 7.4, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic
Title		Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'
Weaknesses		CWE-322
References		https://checkmk.com/werk/17148
Metrics		cvssV4_0 `{'score': 6.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-6572", "assignerOrgId": "f7d6281c-4801-44ce-ace2-493291dedb0f", "state": "PUBLISHED", "assignerShortName": "Checkmk", "dateReserved": "2024-07-08T15:50:02.376Z", "datePublished": "2024-09-09T09:39:17.769Z", "dateUpdated": "2024-09-09T13:03:22.065Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Checkmk", "vendor": "Checkmk GmbH", "versions": [{"lessThan": "2.3.0p15", "status": "affected", "version": "2.3.0", "versionType": "semver"}, {"lessThan": "2.2.0p33", "status": "affected", "version": "2.2.0", "versionType": "semver"}, {"lessThan": "2.1.0p48", "status": "affected", "version": "2.1.0", "versionType": "semver"}, {"lessThanOrEqual": "2.0.0p39", "status": "affected", "version": "2.0.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "value": "Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic"}], "impacts": [{"capecId": "CAPEC-94", "descriptions": [{"lang": "en", "value": "CAPEC-94: Adversary in the Middle (AiTM)"}]}], "metrics": [{"cvssV4_0": {"baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N", "version": "4.0"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-322", "description": "CWE-322: Key Exchange without Entity Authentication", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "f7d6281c-4801-44ce-ace2-493291dedb0f", "shortName": "Checkmk", "dateUpdated": "2024-09-09T09:39:17.769Z"}, "references": [{"url": "https://checkmk.com/werk/17148"}], "title": "Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'"}, "adp": [{"affected": [{"vendor": "checkmk", "product": "checkmk", "cpes": ["cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2.3.0", "status": "affected", "lessThan": "2.3.0p15", "versionType": "semver"}, {"version": "2.2.0", "status": "affected", "lessThan": "2.2.0p33", "versionType": "semver"}, {"version": "2.1.0", "status": "affected", "lessThan": "2.1.0p48", "versionType": "semver"}, {"version": "2.0.0", "status": "affected", "lessThanOrEqual": "2.0.0p39", "versionType": "semver"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-09-09T12:57:41.533717Z", "id": "CVE-2024-6572", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-09T13:03:22.065Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-6572 (string)

assignerOrgId : f7d6281c-4801-44ce-ace2-493291dedb0f (string)

state : PUBLISHED (string)

assignerShortName : Checkmk (string)

dateReserved : 2024-07-08T15:50:02.376Z (string)

datePublished : 2024-09-09T09:39:17.769Z (string)

dateUpdated : 2024-09-09T13:03:22.065Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : Checkmk (string)

vendor : Checkmk GmbH (string)

versions : [ »

0 : { »

lessThan : 2.3.0p15 (string)

status : affected (string)

version : 2.3.0 (string)

versionType : semver (string)

}

1 : { »

lessThan : 2.2.0p33 (string)

status : affected (string)

version : 2.2.0 (string)

versionType : semver (string)

}

2 : { »

lessThan : 2.1.0p48 (string)

status : affected (string)

version : 2.1.0 (string)

versionType : semver (string)

}

3 : { »

lessThanOrEqual : 2.0.0p39 (string)

status : affected (string)

version : 2.0.0 (string)

versionType : semver (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic (string)

}

]

impacts : [ »

0 : { »

capecId : CAPEC-94 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-94: Adversary in the Middle (AiTM) (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV4_0 : { »

baseScore : 6.3 (number)

baseSeverity : MEDIUM (string)

vectorString : CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N (string)

version : 4.0 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-322 (string)

description : CWE-322: Key Exchange without Entity Authentication (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : f7d6281c-4801-44ce-ace2-493291dedb0f (string)

shortName : Checkmk (string)

dateUpdated : 2024-09-09T09:39:17.769Z (string)

}

references : [ »

0 : { »

url : https://checkmk.com/werk/17148 (string)

}

]

title : Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' (string)

}

adp : [ »

0 : { »

affected : [ »

0 : { »

vendor : checkmk (string)

product : checkmk (string)

cpes : [ »

0 : cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 2.3.0 (string)

status : affected (string)

lessThan : 2.3.0p15 (string)

versionType : semver (string)

}

1 : { »

version : 2.2.0 (string)

status : affected (string)

lessThan : 2.2.0p33 (string)

versionType : semver (string)

}

2 : { »

version : 2.1.0 (string)

status : affected (string)

lessThan : 2.1.0p48 (string)

versionType : semver (string)

}

3 : { »

version : 2.0.0 (string)

status : affected (string)

lessThanOrEqual : 2.0.0p39 (string)

versionType : semver (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.4 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : HIGH (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-09-09T12:57:41.533717Z (string)

id : CVE-2024-6572 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-09T13:03:22.065Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-6572", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-09T12:57:41.533717Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:*"], "vendor": "checkmk", "product": "checkmk", "versions": [{"status": "affected", "version": "2.3.0", "lessThan": "2.3.0p15", "versionType": "semver"}, {"status": "affected", "version": "2.2.0", "lessThan": "2.2.0p33", "versionType": "semver"}, {"status": "affected", "version": "2.1.0", "lessThan": "2.1.0p48", "versionType": "semver"}, {"status": "affected", "version": "2.0.0", "versionType": "semver", "lessThanOrEqual": "2.0.0p39"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-09T13:03:06.539Z"}}], "cna": {"title": "Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'", "impacts": [{"capecId": "CAPEC-94", "descriptions": [{"lang": "en", "value": "CAPEC-94: Adversary in the Middle (AiTM)"}]}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N"}}], "affected": [{"vendor": "Checkmk GmbH", "product": "Checkmk", "versions": [{"status": "affected", "version": "2.3.0", "lessThan": "2.3.0p15", "versionType": "semver"}, {"status": "affected", "version": "2.2.0", "lessThan": "2.2.0p33", "versionType": "semver"}, {"status": "affected", "version": "2.1.0", "lessThan": "2.1.0p48", "versionType": "semver"}, {"status": "affected", "version": "2.0.0", "versionType": "semver", "lessThanOrEqual": "2.0.0p39"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://checkmk.com/werk/17148"}], "descriptions": [{"lang": "en", "value": "Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-322", "description": "CWE-322: Key Exchange without Entity Authentication"}]}], "providerMetadata": {"orgId": "f7d6281c-4801-44ce-ace2-493291dedb0f", "shortName": "Checkmk", "dateUpdated": "2024-09-09T09:39:17.769Z"}}}, "cveMetadata": {"cveId": "CVE-2024-6572", "state": "PUBLISHED", "dateUpdated": "2024-09-09T13:03:22.065Z", "dateReserved": "2024-07-08T15:50:02.376Z", "assignerOrgId": "f7d6281c-4801-44ce-ace2-493291dedb0f", "datePublished": "2024-09-09T09:39:17.769Z", "assignerShortName": "Checkmk"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.4 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : HIGH (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-6572 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-09-09T12:57:41.533717Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:* (string)

]

vendor : checkmk (string)

product : checkmk (string)

versions : [ »

0 : { »

status : affected (string)

version : 2.3.0 (string)

lessThan : 2.3.0p15 (string)

versionType : semver (string)

}

1 : { »

status : affected (string)

version : 2.2.0 (string)

lessThan : 2.2.0p33 (string)

versionType : semver (string)

}

2 : { »

status : affected (string)

version : 2.1.0 (string)

lessThan : 2.1.0p48 (string)

versionType : semver (string)

}

3 : { »

status : affected (string)

version : 2.0.0 (string)

versionType : semver (string)

lessThanOrEqual : 2.0.0p39 (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-09-09T13:03:06.539Z (string)

}

]

cna : { »

title : Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' (string)

impacts : [ »

0 : { »

capecId : CAPEC-94 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-94: Adversary in the Middle (AiTM) (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV4_0 : { »

version : 4.0 (string)

baseScore : 6.3 (number)

baseSeverity : MEDIUM (string)

vectorString : CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N (string)

}

]

affected : [ »

0 : { »

vendor : Checkmk GmbH (string)

product : Checkmk (string)

versions : [ »

0 : { »

status : affected (string)

version : 2.3.0 (string)

lessThan : 2.3.0p15 (string)

versionType : semver (string)

}

1 : { »

status : affected (string)

version : 2.2.0 (string)

lessThan : 2.2.0p33 (string)

versionType : semver (string)

}

2 : { »

status : affected (string)

version : 2.1.0 (string)

lessThan : 2.1.0p48 (string)

versionType : semver (string)

}

3 : { »

status : affected (string)

version : 2.0.0 (string)

versionType : semver (string)

lessThanOrEqual : 2.0.0p39 (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://checkmk.com/werk/17148 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-322 (string)

description : CWE-322: Key Exchange without Entity Authentication (string)

}

]

}

]

providerMetadata : { »

orgId : f7d6281c-4801-44ce-ace2-493291dedb0f (string)

shortName : Checkmk (string)

dateUpdated : 2024-09-09T09:39:17.769Z (string)

}

cveMetadata : { »

cveId : CVE-2024-6572 (string)

state : PUBLISHED (string)

dateUpdated : 2024-09-09T13:03:22.065Z (string)

dateReserved : 2024-07-08T15:50:02.376Z (string)

assignerOrgId : f7d6281c-4801-44ce-ace2-493291dedb0f (string)

datePublished : 2024-09-09T09:39:17.769Z (string)

assignerShortName : Checkmk (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic"}, {"lang": "es", "value": "La verificaci\u00f3n incorrecta de la clave del host en la verificaci\u00f3n activa 'Check SFTP Service' y el agente especial 'VNX quotas and filesystem' en Checkmk anterior a Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 y 2.0.0 (EOL) permite a los atacantes intermediarios interceptar el tr\u00e1fico"}], "id": "CVE-2024-6572", "lastModified": "2024-09-09T13:35:00.847", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.2, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "automatable": "NOT_DEFINED", "availabilityRequirements": "NOT_DEFINED", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityRequirements": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirements": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubsequentSystemAvailability": "NOT_DEFINED", "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED", "modifiedSubsequentSystemIntegrity": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnerableSystemAvailability": "NOT_DEFINED", "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED", "modifiedVulnerableSystemIntegrity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "recovery": "NOT_DEFINED", "safety": "NOT_DEFINED", "subsequentSystemAvailability": "NONE", "subsequentSystemConfidentiality": "NONE", "subsequentSystemIntegrity": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnerabilityResponseEffort": "NOT_DEFINED", "vulnerableSystemAvailability": "NONE", "vulnerableSystemConfidentiality": "LOW", "vulnerableSystemIntegrity": "NONE"}, "source": "security@checkmk.com", "type": "Secondary"}]}, "published": "2024-09-09T10:15:01.863", "references": [{"source": "security@checkmk.com", "url": "https://checkmk.com/werk/17148"}], "sourceIdentifier": "security@checkmk.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-322"}], "source": "security@checkmk.com", "type": "Secondary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic (string)

}

1 : { »

lang : es (string)

value : La verificación incorrecta de la clave del host en la verificación activa 'Check SFTP Service' y el agente especial 'VNX quotas and filesystem' en Checkmk anterior a Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 y 2.0.0 (EOL) permite a los atacantes intermediarios interceptar el tráfico (string)

}

]

id : CVE-2024-6572 (string)

lastModified : 2024-09-09T13:35:00.847 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.4 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.2 (number)

impactScore : 5.2 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

cvssMetricV40 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackRequirements : PRESENT (string)

attackVector : NETWORK (string)

automatable : NOT_DEFINED (string)

availabilityRequirements : NOT_DEFINED (string)

baseScore : 6.3 (number)

baseSeverity : MEDIUM (string)

confidentialityRequirements : NOT_DEFINED (string)

exploitMaturity : NOT_DEFINED (string)

integrityRequirements : NOT_DEFINED (string)

modifiedAttackComplexity : NOT_DEFINED (string)

modifiedAttackRequirements : NOT_DEFINED (string)

modifiedAttackVector : NOT_DEFINED (string)

modifiedPrivilegesRequired : NOT_DEFINED (string)

modifiedSubsequentSystemAvailability : NOT_DEFINED (string)

modifiedSubsequentSystemConfidentiality : NOT_DEFINED (string)

modifiedSubsequentSystemIntegrity : NOT_DEFINED (string)

modifiedUserInteraction : NOT_DEFINED (string)

modifiedVulnerableSystemAvailability : NOT_DEFINED (string)

modifiedVulnerableSystemConfidentiality : NOT_DEFINED (string)

modifiedVulnerableSystemIntegrity : NOT_DEFINED (string)

privilegesRequired : NONE (string)

providerUrgency : NOT_DEFINED (string)

recovery : NOT_DEFINED (string)

safety : NOT_DEFINED (string)

subsequentSystemAvailability : NONE (string)

subsequentSystemConfidentiality : NONE (string)

subsequentSystemIntegrity : LOW (string)

userInteraction : NONE (string)

valueDensity : NOT_DEFINED (string)

vectorString : CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X (string)

version : 4.0 (string)

vulnerabilityResponseEffort : NOT_DEFINED (string)

vulnerableSystemAvailability : NONE (string)

vulnerableSystemConfidentiality : LOW (string)

vulnerableSystemIntegrity : NONE (string)

}

source : security@checkmk.com (string)

type : Secondary (string)

}

]

}

published : 2024-09-09T10:15:01.863 (string)

references : [ »

0 : { »

source : security@checkmk.com (string)

url : https://checkmk.com/werk/17148 (string)

}

]

sourceIdentifier : security@checkmk.com (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-322 (string)

}

]

source : security@checkmk.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact Low

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact Low

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object