Lucene search

PRIOn knowledge basePRION:CVE-2022-48319

HistoryFeb 20, 2023 - 5:15 p.m.

Code injection

2023-02-2017:15:00

PRIOn knowledge base

www.prio-n.com

code injection

tribe29

checkmk

vulnerability

host secret disclosure

agent updater

log file

nvd

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29’s Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to gain access to the host secret through the unprotected agent updater log file.

CPENameOperatorVersion
checkmkeq2.1.0 b2
checkmkeq2.1.0 b3
checkmkeq2.1.0 b4
checkmkeq2.1.0 b5
checkmkeq2.1.0 b6
checkmkeq2.1.0 b7
checkmkeq2.1.0 b8
checkmkeq2.1.0 b9
checkmkeq2.1.0 b1
checkmkeq2.1.0 p1

Name	Operator	Version
checkmk	eq	2.1.0 b2
checkmk	eq	2.1.0 b3
checkmk	eq	2.1.0 b4
checkmk	eq	2.1.0 b5
checkmk	eq	2.1.0 b6
checkmk	eq	2.1.0 b7
checkmk	eq	2.1.0 b8
checkmk	eq	2.1.0 b9
checkmk	eq	2.1.0 b1
checkmk	eq	2.1.0 p1

Rows per page:

1-10 of 1051

References

checkmk.com/werk/14916