CVE-2023-22348: Checkmk

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.

Affected products

• Checkmk Checkmk: version 2.1.0 only; version 2.2.0 only
• TRIBE29 Checkmk: before 2.1.0 (fixed in 2.1.0)

Published 2023-05-17. Last modified 2026-06-17.