Vulnerabilities > Tribe29 > Checkmk > 1.6.0p15

DATE CVE VULNERABILITY TITLE RISK
2022-05-20 CVE-2022-31258 Link Following vulnerability in multiple products
In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink.
local
low complexity
tribe29 checkmk CWE-59
6.7
6.7
2022-03-25 CVE-2021-40905 Unrestricted Upload of File with Dangerous Type vulnerability in multiple products
The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of ".mkp" files, which are Extension Packages, making remote code execution possible.
network
low complexity
tribe29 checkmk CWE-434
8.8
8.8