CVE-2017-14955

Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain…

published October 1, 2017

CVSS
—
EPSS
12%
Percentile
96.1
In the wild
Unconfirmed
What it is

Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain sensitive user information by reading a GUI crash report.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12134 · 96.1th percentile
Published
2017-10-01T05:00Z
EPSS history
Timeline
  • 01 OCT 05:00Z
    Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain…
    cvelistv5