Lucene search
+L

1497 matches found

Cvelist
Cvelist
added 2024/10/14 7:19 a.m.23 views

CVE-2024-38862 SNMP and IMPI secrets written to audit log

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p18, 2.2.0p35, 2.1.0p48 and =2.0.0p39 EOL causes SNMP and IMPI secrets of host and folder properties to be written to audit log files accessible to administrators...

5.1CVSS0.0032EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/14 7:19 a.m.10 views

CVE-2024-38862 SNMP and IMPI secrets written to audit log

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p18, 2.2.0p35, 2.1.0p48 and =2.0.0p39 EOL causes SNMP and IMPI secrets of host and folder properties to be written to audit log files accessible to administrators...

5.1CVSS5.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/14 12:00 a.m.13 views

PT-2024-28243 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.3.0p18 Checkmk versions 2.2.0p35 Checkmk versions 2.1.0p48 Checkmk versions =2.0.0p39 EOL Description: The issue concerns the insertion of sensitive information into log files in Checkmk, causing SNMP and IMPI secrets of ho...

5.1CVSS6.8AI score0.0032EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2024/10/14 12:00 a.m.7 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk that stems from the exposure of CSRF tokens in specific request query parameters could lead to token disclosure, which could facilitate targeted phishing attacks...

7.5CVSS6.5AI score0.00417EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/14 12:00 a.m.8 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. A security vulnerability exists in Checkmk that stems from the insertion of sensitive information into log files, which could result in SNMP and IMPI secrets for host and folder attributes being written to administrator-accessible audit log...

5.1CVSS6.2AI score0.0032EPSS
SaveExploits0References2
NVD
NVD
added 2024/10/10 8:15 a.m.15 views

CVE-2024-6747

Information leakage in mknotifyd in Checkmk before 2.3.0p18, 2.2.0p36, 2.1.0p49 and in 2.0.0p39 EOL allows attacker to get potentially sensitive data...

7.5CVSS0.00376EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/10 8:15 a.m.31 views

UBUNTU-CVE-2024-6747

Information leakage in mknotifyd in Checkmk before 2.3.0p18, 2.2.0p36, 2.1.0p49 and in 2.0.0p39 EOL allows attacker to get potentially sensitive data...

7.5CVSS5.8AI score0.00376EPSS
SaveExploits0References3
CVE
CVE
added 2024/10/10 7:43 a.m.61 views

CVE-2024-6747

This CVE concerns Checkmk’s mknotifyd information leakage: affected in Checkmk versions before 2.3.0p18, 2.2.0p36, 2.1.0p49 and 2.0.0p39 (EOL). The underlying issue is an information exposure that may allow an attacker to access potentially sensitive data. No exploitation details are provided in ...

7.5CVSS5.5AI score0.00376EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/10 7:43 a.m.18 views

CVE-2024-6747 Information leak in mknotifyd

Information leakage in mknotifyd in Checkmk before 2.3.0p18, 2.2.0p36, 2.1.0p49 and in 2.0.0p39 EOL allows attacker to get potentially sensitive data...

5.3CVSS6.7AI score0.00376EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/10 7:43 a.m.14 views

CVE-2024-6747 Information leak in mknotifyd

Information leakage in mknotifyd in Checkmk before 2.3.0p18, 2.2.0p36, 2.1.0p49 and in 2.0.0p39 EOL allows attacker to get potentially sensitive data...

5.3CVSS5.9AI score
SaveExploits0References3
Cvelist
Cvelist
added 2024/10/10 7:43 a.m.23 views

CVE-2024-6747 Information leak in mknotifyd

Information leakage in mknotifyd in Checkmk before 2.3.0p18, 2.2.0p36, 2.1.0p49 and in 2.0.0p39 EOL allows attacker to get potentially sensitive data...

5.3CVSS0.00376EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/10 12:00 a.m.7 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform from Checkmk, Inc. Checkmk has a security vulnerability that stems from the presence of an information leak that allows an attacker to access potentially sensitive data...

7.5CVSS6.2AI score0.00376EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/10 12:00 a.m.6 views

PT-2024-37843 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0p18 Checkmk versions prior to 2.2.0p36 Checkmk versions prior to 2.1.0p49 Checkmk version 2.0.0p39 Description: Information leakage in mknotifyd allows an attacker to obtain potentially sensitive data. This issu...

7.5CVSS6.9AI score0.00376EPSS
SaveExploits0References11
OSV
OSV
added 2024/09/27 9:15 a.m.7 views

CVE-2024-38861

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4amk through 2.0a...

7.4CVSS5.8AI score0.00189EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/27 9:15 a.m.39 views

CVE-2024-38861

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4amk through 2.0a...

7.4CVSS0.00189EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/27 8:11 a.m.96 views

CVE-2024-38861

The CVE-2024-38861 entry covers an improper certificate validation issue in the Checkmk Exchange MikroTik plugin, enabling potential MitM interception. Affected MikroTik versions are 0.4a_mk–2.0a and 2.0.0–2.5.5. The vulnerability arises from TLS/certificate validation weaknesses in the plugin, n...

7.4CVSS6.5AI score0.00189EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/27 8:11 a.m.35 views

CVE-2024-38861 Lack of TLS validation in plugin MikroTik on Checkmk Exchange

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4amk through 2.0a...

4.9CVSS6.9AI score0.00189EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/27 8:11 a.m.50 views

CVE-2024-38861 Lack of TLS validation in plugin MikroTik on Checkmk Exchange

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4amk through 2.0a...

4.9CVSS0.00189EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/09/27 12:00 a.m.13 views

Checkmk Exchange plugin MikroTik 安全漏洞

Checkmk Exchange plugin MikroTik is a plugin from Checkmk Inc. A security vulnerability exists in Checkmk Exchange plugin MikroTik versions 2.0.0 through 2.5.5 and 0.4amk through 2.0a, which originates from improper certificate validation and allows an attacker in the position of MitM to intercep...

7.4CVSS6.7AI score0.00189EPSS
SaveExploits0References2
NVD
NVD
added 2024/09/23 7:15 a.m.38 views

CVE-2024-8606

Bypass of two factor authentication in RestAPI in Checkmk 2.3.0p16 and 2.2.0p34 allows authenticated users to bypass two factor authentication...

9.2CVSS0.00459EPSS
SaveExploits0References1
Rows per page
Query Builder