CVE-2022-4884

Path-Traversal in MKP storing

Published Jan 9, 2023 CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Description
Path-Traversal in MKP storing in Tribe29 Checkmk <=2.0.0p32 and <= 2.1.0p18 allows an administrator to write mkp files to arbitrary locations via a malicious mkp file.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-52144 Path-Traversal in MKP storing in Tribe29 Checkmk <=2.0.0p32 and <= 2.1.0p18 allows an administrator to write mkp files to arbitrary locations via a malicious mkp file.
References
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Tribe29
Published
Updated
Apr 8, 2025, 6:46 PM
Reserved
Jan 9, 2023, 12:41 PM
Status
Modified
Published
Jan 9, 2023, 5:15 PM
Modified
Jun 17, 2026, 5:22 AM