CVE catalog

CVE-2024-28833

UBUNTU-CVE-2024-28833

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.40% · Oct 25, 2026

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntucheck-mkpro1.2.6p5-1vulnerable
Ubuntucheck-mkpro1.2.6p12-1vulnerable
Ubuntucheck-mkpro1.2.6p12-1ubuntu0.16.04.1vulnerable
Ubuntucheck-mkpro1.2.6p12-1ubuntu0.16.04.1+esm1vulnerable
Ubuntucheck-mk18.041.2.8p16-1ubuntu0.1vulnerable
Ubuntucheck-mk18.041.2.8p16-1ubuntu0.2vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References