← Database

CVE-2023-2020

MEDIUM CVSS: 4.3 Published: 2023-04-18 Modified: 2026-06-17

Description

Insufficient permission checks in the REST API in Tribe29 Checkmk <= 2.1.0p27 and <= 2.2.0b4 (beta) allow unauthorized users to schedule downtimes for any host.

Affected Platforms

Checkmk Checkmk

Weakness Type

CWE-280, CWE-863

References