Description


Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35, <2.1.0p48 and <=2.0.0p39 (EOL) causes SNMP and IMPI secrets of host and folder properties to be written to audit log files accessible to administrators.

Related CPE's


a

checkmk

checkmk

127

References


Weaknesses



CWE-532


CWE-532

CVSS impact metrics


CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.4 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2024-10-14T06:15:02.563Z

1 year ago

Last modified

2024-12-03T15:56:19.887Z

1 year ago