Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.
References
Link | Resource |
---|---|
https://checkmk.com/werk/15423 | Patch Vendor Advisory |
https://checkmk.com/werk/15423 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:39
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.7 |
References | () https://checkmk.com/werk/15423 - Patch, Vendor Advisory |
23 Jul 2024, 19:37
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-04-04 07:15
Updated : 2024-11-21 07:39
NVD link : CVE-2023-1768
Mitre link : CVE-2023-1768
CVE.ORG link : CVE-2023-1768
JSON object : View
Products Affected
checkmk
- checkmk
tribe29
- checkmk
CWE