CVE-2022-48319

Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to gain access to the host secret through the unprotected agent updater log file.

Score

CVSS 3.1 6.5 Medium

Status

Modified - security@checkmk.com

Published

2023-02-20

Last modified

2025-03-12

Weaknesses

CWE-200, CWE-532

Affected products

• Checkmk (Checkmk)
• Checkmk (Tribe29)

References

• https://checkmk.com/werk/14916