CVE-2023-23549
Assigner: Checkmk
Published: 2023-11-15T11:07:28.671Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Checkmk
vendor: Checkmk GmbH
versions: lessThan: 2.2.0p15
status: affected
version: 2.2.0
versionType: semver
lessThan: 2.1.0p37
status: affected
version: 2.1.0
versionType: semver
lessThanOrEqual: 2.0.0p39
status: affected
version: 2.0.0
versionType: semver
descriptions: value: Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames.
impacts: capecId: CAPEC-153
descriptions: value: CAPEC-153: Input Data Manipulation
metrics: cvssV3_1: baseScore: 2.7
baseSeverity: LOW
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
version: 3.1
problemTypes: descriptions: cweId: CWE-20
description: CWE-20 Improper Input Validation
type: CWE
title: DoS via long hostnames