CVE-2022-48321

Description

Limited Server-Side Request Forgery (SSRF) in agent-receiver in Tribe29's Checkmk <= 2.1.0p11 allows an attacker to communicate with local network restricted endpoints by use of the host registration API.

References

https://www.sonarsource.com/blog/checkmk-rce-chain-1/

https://checkmk.com/werk/14385

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS