CVE-2023-22359

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

User enumeration in Checkmk <=2.2.0p4 allows an authenticated attacker to enumerate usernames.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-203

Affected software

VendorProductVersions
Tribe29Checkmk>= 2.2.0, <= 2.2.0p4

References

Timeline

Published
Jun 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-22367.8A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Both io_instaCVE-2023-223607.8Use-after free vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process even wCVE-2023-223616.5Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote authenticated attacker CVE-2023-223627.5SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information frCVE-2023-223637.5A stack-based buffer overflow in the Command Centre Server allows an attacker to cause a denial of service attack via assigning cardholders CVE-2023-223657.2An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v32.3.0.5. A specially CVE-2023-223667.8CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted projectCVE-2023-223675.9Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server certificates, whichCVE-2023-223687.8Untrusted search path vulnerability in ELECOM Camera Assistant 1.00 and QuickFileDealer Ver.1.2.1 and earlier allows an attacker to gain priCVE-2023-22378.8The WP Replicate Post plugin for WordPress is vulnerable to SQL Injection via the post_id parameter in versions up to, and including, 4.0.2 CVE-2023-223705.2Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent autCVE-2023-223718.1An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2. A specially-crafte
CVE-2023-22359: Medium severity, CVSS 4.3 | Vulnix