CVE catalog

CVE-2022-4884

UBUNTU-CVE-2022-4884

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.50% · Oct 25, 2026

Path-Traversal in MKP storing in Tribe29 Checkmk <=2.0.0p32 and <= 2.1.0p18 allows an administrator to write mkp files to arbitrary locations via a malicious mkp file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntucheck-mkpro1.2.6p5-1vulnerable
Ubuntucheck-mkpro1.2.6p12-1vulnerable
Ubuntucheck-mkpro1.2.6p12-1ubuntu0.16.04.1vulnerable
Ubuntucheck-mkpro1.2.6p12-1ubuntu0.16.04.1+esm1vulnerable
Ubuntucheck-mk18.041.2.8p16-1ubuntu0.1vulnerable
Ubuntucheck-mk18.041.2.8p16-1ubuntu0.2vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References