CVE-2024-6572

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic

Score

CVSS 3.1 7.4 High

Status

Analyzed - security@checkmk.com

Published

2024-09-09

Last modified

2024-09-09

Weaknesses

CWE-322

Affected products

• Checkmk (Checkmk)
• Checkmk (Checkmk Gmbh)

References

• https://checkmk.com/werk/17148