Check_MK Information < 1.2.8p26 Disclosure Vulnerability

CheckMK is prone to a race condition vulnerability which could lead to information disclosure. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2017-14955

CheckMK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain sensitive user information by reading a GUI crash report...

CVE-2017-14955

CVE-2017-14955 affects Check_MK (Checkmk) before version 1.2.8p26, where a race-condition in the failed-login save feature can allow a remote attacker to read GUI crash reports and obtain sensitive user information. This is described across multiple advisories as a Check_MK information-disclosure...

CVE-2017-14955

CheckMK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain sensitive user information by reading a GUI crash report...