Limited Server-Side Request Forgery (SSRF) in agent-receiver in Tribe29's Checkmk <= 2.1.0p11 allows an attacker to communicate with local network restricted endpoints by use of the host registration API.
{
"cpe": [
"cpe:2.3:a:checkmk:checkmk:2.1.0:-:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:b1:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:p1:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:b2:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:p2:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:b3:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:p3:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:b4:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:p4:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:b5:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:p5:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:b6:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:p6:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:b7:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:p7:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:b8:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:p8:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:b9:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:p9:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:p10:*:*:*:*:*:*",
"cpe:2.3:a:checkmk:checkmk:2.1.0:p11:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "2.1.0-NA"
},
{
"last_affected": "2.1.0-NA"
},
{
"introduced": "2.1.0-b1"
},
{
"last_affected": "2.1.0-b1"
},
{
"introduced": "2.1.0-p1"
},
{
"last_affected": "2.1.0-p1"
},
{
"introduced": "2.1.0-b2"
},
{
"last_affected": "2.1.0-b2"
},
{
"introduced": "2.1.0-p2"
},
{
"last_affected": "2.1.0-p2"
},
{
"introduced": "2.1.0-b3"
},
{
"last_affected": "2.1.0-b3"
},
{
"introduced": "2.1.0-p3"
},
{
"last_affected": "2.1.0-p3"
},
{
"introduced": "2.1.0-b4"
},
{
"last_affected": "2.1.0-b4"
},
{
"introduced": "2.1.0-p4"
},
{
"last_affected": "2.1.0-p4"
},
{
"introduced": "2.1.0-b5"
},
{
"last_affected": "2.1.0-b5"
},
{
"introduced": "2.1.0-p5"
},
{
"last_affected": "2.1.0-p5"
},
{
"introduced": "2.1.0-b6"
},
{
"last_affected": "2.1.0-b6"
},
{
"introduced": "2.1.0-p6"
},
{
"last_affected": "2.1.0-p6"
},
{
"introduced": "2.1.0-b7"
},
{
"last_affected": "2.1.0-b7"
},
{
"introduced": "2.1.0-p7"
},
{
"last_affected": "2.1.0-p7"
},
{
"introduced": "2.1.0-b8"
},
{
"last_affected": "2.1.0-b8"
},
{
"introduced": "2.1.0-p8"
},
{
"last_affected": "2.1.0-p8"
},
{
"introduced": "2.1.0-b9"
},
{
"last_affected": "2.1.0-b9"
},
{
"introduced": "2.1.0-p9"
},
{
"last_affected": "2.1.0-p9"
},
{
"introduced": "2.1.0-p10"
},
{
"last_affected": "2.1.0-p10"
},
{
"introduced": "2.1.0-p11"
},
{
"last_affected": "2.1.0-p11"
}
],
"source": "CPE_STRING"
}