CVE-2023-2020 (published 2023-04-18T11:09:09.107Z)
Insufficient permission checks in the REST API in Tribe29 Checkmk <= 2.1.0p27 and <= 2.2.0b4 (beta) allow unauthorized users to schedule downtimes for any host.
Affected products: Vendor: Tribe29
Product: Checkmk
Versions: 2.2.0, 2.1.0