CVE-2023-1768 in Checkmk

Sumário

de MITRE • 04/04/2023

Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsável: Tribe29 GmbH
• Reservar: 31/03/2023
• Divulgação: 04/04/2023
• Moderação: aceite
• Entrada: VDB-224821
• CPE: pronto
• CWE: CWE-446 (confirmado)
• CVSS: 5.3 (NVD)
• EPSS: 0.00913
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-1768
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-1768
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-1768/