CVE-2023-31211

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jan 12, 2024
Updated: Jul 23, 2024
CWE ID 670
CWE ID 303

Summary

CVE-2023-31211 is a vulnerability affecting Checkmk versions before 2.2.0p18, 2.1.0p38, and 2.0.0p39. This issue stems from an insufficient authentication flow, enabling unauthorized users to utilize locked credentials. Attackers can exploit this vulnerability by bypassing the multi-factor authentication mechanism, potentially gaining unauthorized access to sensitive information or system functionalities. This weakness may lead to serious security consequences, including data breaches or system compromise. Organizations using vulnerable Checkmk versions are advised to update their systems promptly to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Tribe29 Checkmk
  • Checkmk

Affected Vendors

  • Check MK
  • Tribe29