Lucene search
HistoryNov 27, 2023 - 2:15 p.m.
CVE-2023-6287
sensitive data exposure
tribe29 checkmk
password retrieval
log files
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
5.1%
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files.
Affected configurations
Node
tribe29checkmk_appliance_firmwareRange<1.6.8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| tribe29 | checkmk_appliance_firmware | * | cpe:2.3:o:tribe29:checkmk_appliance_firmware:*:*:*:*:*:*:*:* |
References
Related
ubuntucve
ubuntucve
CVE-2023-6287
2023-11-27 00:00:00
prion
prion
Code injection
2023-11-27 14:15:00
cvelist
cvelist
CVE-2023-6287 Backup password in GET parameter
2023-11-27 14:04:01
cve
cve
CVE-2023-6287
2023-11-27 14:15:08
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2023-6287