Lucene search

CheckmkCVELIST:CVE-2023-6287

HistoryNov 27, 2023 - 2:04 p.m.

CVE-2023-6287 Backup password in GET parameter

2023-11-2714:04:01

CWE-598

Checkmk

www.cve.org

cve-2023-6287

backup password

webconf

sensitive data exposure

tribe29 checkmk

appliance

log files

local attacker

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

Percentile

5.1%

JSON

Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Checkmk Appliance",
    "vendor": "Checkmk GmbH",
    "versions": [
      {
        "lessThan": "1.6.8",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

checkmk.com/werk/9554

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5.6

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-6287