PatchTheCVEcheck mk vulnerabilities and fixes
Recent CVEs affecting check mk, with upgrade or downgrade steps. 3 tracked.
Also searched as: checkmk.
check mk has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2018-07-19. Highest priority: CVE-2017-9781 (score 45/100).
- CVE-2017-9781 MEDIUM 6.1 DOWNGRADE A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6, allowing an un
- CVE-2017-11507 MEDIUM 6.1 DOWNGRADE A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x pri
- CVE-2014-0243 MEDIUM 5.5 UPGRADE Check_MK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/l
FAQ
How do I fix check mk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is check mk being exploited right now?
None of the tracked check mk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which check mk CVE should I patch first?
CVE-2017-9781 currently ranks highest (45/100): A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6, allowing an un.