Description (CNA)
Missing authorization in Checkmk <2.5.0p12, <2.4.0p36, <2.3.0p50 and all 2.2.0 versions allows an authenticated user who knows the ID of a background job to view that job's status and results.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Checkmk GmbH / Checkmk | affected 2.5.0 before 2.5.0p12; affected 2.4.0 before 2.4.0p36; affected 2.3.0 before 2.3.0p50; affected 2.2.0 |
CWE
CWE-862
References
ADP enrichment
No English description supplied.
No references supplied.