WS-2020-0188

In the affected versions, the AWS Encryption CLI operated in "discovery mode" even when "strict mode" was specified. Although decryption only succeeded if the user had permission to decrypt with at least one of the CMKs, decryption could be successful using a CMK that was not included in the...

Malicious code in banana-cmk-project (npm)

The package banana-cmk-project was found to contain malicious code...

MAL-2025-15384 Malicious code in banana-cmk-project (npm)

The package banana-cmk-project was found to contain malicious code...

UBUNTU-CVE-2022-48319

Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk = 2.1.0p13, Checkmk = 2.0.0p29, and all versions of Checkmk 1.6.0 EOL allows an attacker to gain access to the host secret through the unprotected agent updater log file...

CVE-2022-48319

CVE-2022-48319 describes a local-information-disclosure vulnerability in Tribe29’s Checkmk where an attacker can access the host secret via the unprotected cmk-update-agent.log. Affected: Checkmk versions <= 2.1.0p13,

CVE-2022-48319: Exposure of Sensitive Information to an Unauthorized Actor

Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk = 2.1.0p13, Checkmk = 2.0.0p29, and all versions of Checkmk 1.6.0 EOL allows an attacker to gain access to the host secret through the unprotected agent updater log file...

PT-2020-20974

Name of the Vulnerable Software and Affected Versions AWS Encryption CLI versions prior to 1.8.x AWS Encryption CLI versions prior to 2.1.x Description The issue allows decryption to succeed using a CMK that was not included in the user-defined set when the CLI is operating in "strict mode", even...