CVE-2023-31211CWE-303

Disabled automation users could still authenticate

High · published January 12, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00511 · 42.7th percentile
Weakness
CWE-303 · Incorrect Implementation of Authentication Algorithm
Published
2024-01-12T07:49Z
EPSS history
Timeline
  • 12 JAN 07:49Z
    Disabled automation users could still authenticate
    cvelistv5