Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.
References
| Link | Resource |
|---|---|
| https://checkmk.com/werk/15423 | Patch Vendor Advisory |
| https://checkmk.com/werk/15423 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:39
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.7 |
| References | () https://checkmk.com/werk/15423 - Patch, Vendor Advisory |
23 Jul 2024, 19:37
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-04 07:15
Updated : 2024-11-21 07:39
NVD link : CVE-2023-1768
Mitre link : CVE-2023-1768
CVE.ORG link : CVE-2023-1768
JSON object : View
Products Affected
checkmk
- checkmk
tribe29
- checkmk
CWE
