Lucene search

[email protected]CVE-2023-1768

HistoryApr 04, 2023 - 7:15 a.m.

CVE-2023-1768

2023-04-0407:15:11

NVD-CWE-Other

CWE-446

[email protected]

web.nvd.nist.gov

cve-2023-1768

information security

checkmk

encryption

vulnerability

nvd

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

24.8%

JSON

Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.

CPENameOperatorVersion
tribe29:checkmktribe29 checkmkeq1.6.0
tribe29:checkmktribe29 checkmkeq1.6.0b10
tribe29:checkmktribe29 checkmkeq1.6.0b11
tribe29:checkmktribe29 checkmkeq1.6.0p10
tribe29:checkmktribe29 checkmkeq1.6.0p11
tribe29:checkmktribe29 checkmkeq1.6.0p12
tribe29:checkmktribe29 checkmkeq1.6.0p13
tribe29:checkmktribe29 checkmkeq1.6.0p14
tribe29:checkmktribe29 checkmkeq1.6.0p15
tribe29:checkmktribe29 checkmkeq1.6.0p16

CPE	Name	Operator	Version
tribe29:checkmk	tribe29 checkmk	eq	1.6.0
tribe29:checkmk	tribe29 checkmk	eq	1.6.0b10
tribe29:checkmk	tribe29 checkmk	eq	1.6.0b11
tribe29:checkmk	tribe29 checkmk	eq	1.6.0p10
tribe29:checkmk	tribe29 checkmk	eq	1.6.0p11
tribe29:checkmk	tribe29 checkmk	eq	1.6.0p12
tribe29:checkmk	tribe29 checkmk	eq	1.6.0p13
tribe29:checkmk	tribe29 checkmk	eq	1.6.0p14
tribe29:checkmk	tribe29 checkmk	eq	1.6.0p15
tribe29:checkmk	tribe29 checkmk	eq	1.6.0p16

Rows per page:

1-10 of 151

References

checkmk.com/werk/15423

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

5.2 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

24.8%

JSON

Related for CVE-2023-1768

cvelist1 osv1 prion1 openvas1 ubuntucve1