CVE-2022-48319CWE-200

Host secret disclosed in Checkmk logs

Medium · published February 20, 2023

CVSS v3.1
6.5
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to gain access to the host secret through the unprotected agent updater log file.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-02-20T16:56Z
EPSS history
Timeline
  • 20 FEB 16:56Z
    Host secret disclosed in Checkmk logs
    cvelistv5