Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

ubuntu логотип

CVE-2026-24097

5 месяцев назад

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observing different HTTP response codes in agent-receiver/register_existing endpoint, which could lead to information disclosure.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2026-24097

5 месяцев назад

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observing different HTTP response codes in agent-receiver/register_existing endpoint, which could lead to information disclosure.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2026-24097

5 месяцев назад

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0 ...

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-34x2-m38g-824f

5 месяцев назад

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observing different HTTP response codes in agent-receiver/register_existing endpoint, which could lead to information disclosure.

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-24097

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observing different HTTP response codes in agent-receiver/register_existing endpoint, which could lead to information disclosure.

CVSS3: 4.3
0%
Низкий
5 месяцев назад
nvd логотип
CVE-2026-24097

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observing different HTTP response codes in agent-receiver/register_existing endpoint, which could lead to information disclosure.

CVSS3: 4.3
0%
Низкий
5 месяцев назад
debian логотип
CVE-2026-24097

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0 ...

CVSS3: 4.3
0%
Низкий
5 месяцев назад
github логотип
GHSA-34x2-m38g-824f

Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observing different HTTP response codes in agent-receiver/register_existing endpoint, which could lead to information disclosure.

CVSS3: 4.3
0%
Низкий
5 месяцев назад

Уязвимостей на страницу