Vulnerability Details CVE-2022-48317
Expired sessions were not securely terminated in the RestAPI for Tribe29's Checkmk <= 2.1.0p10 and Checkmk <= 2.0.0p28 allowing an attacker to use expired session tokens when communicating with the RestAPI.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.7%
CVSS Severity
CVSS v3 Score 5.6
Products affected by CVE-2022-48317
-
cpe:2.3:a:checkmk:checkmk:2.0.0
-
cpe:2.3:a:checkmk:checkmk:2.1.0