Lucene search

Ubuntu.comUB:CVE-2022-48319

HistoryFeb 20, 2023 - 12:00 a.m.

CVE-2022-48319

2023-02-2000:00:00

ubuntu.com

cve-2022-48319

tribe29 checkmk

sensitive information disclosure

host security

unix

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

9.1%

JSON

Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29’s
Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0
(EOL) allows an attacker to gain access to the host secret through the
unprotected agent updater log file.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchcheck-mk< anyUNKNOWN
ubuntu16.04noarchcheck-mk< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	check-mk	< any	UNKNOWN
ubuntu	16.04	noarch	check-mk	< any	UNKNOWN

References

checkmk.com/werk/14916

launchpad.net/bugs/cve/CVE-2022-48319

nvd.nist.gov/vuln/detail/CVE-2022-48319

security-tracker.debian.org/tracker/CVE-2022-48319

www.cve.org/CVERecord?id=CVE-2022-48319

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for UB:CVE-2022-48319