Test ID:	1.3.6.1.4.1.25623.1.0.127051
Category:	Web application abuses
Title:	Check MK 1.6.0x < 1.6.0p19 XSS Vulnerability
Summary:	Check MK is prone to a cross-site scripting (XSS); vulnerability.
Description:	Summary: Check MK is prone to a cross-site scripting (XSS) vulnerability. Vulnerability Impact: Authenticated users that are allowed to configure and share custom views could inject arbitrary JS code to all users which are permitted to view this view. Affected Software/OS: Check MK version 1.6.0x through 1.6.0p18. Solution: Update to version 1.6.0p19, 2.0.0i1 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-28919 https://checkmk.com/check_mk-werks.php?werk_id=11501 https://emacsninja.com/posts/cve-2020-28919-stored-xss-in-checkmk-160p18.html https://github.com/tribe29/checkmk/commit/c00f450f884d8a229b7d8ab3f0452ed802a1ae04 https://github.com/tribe29/checkmk/commit/e7fd8e4c90be490e4293ec91804d00ec01af5ca6
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.