CVE-2023-22307CWE-200CWE-598

Site-Passwords in GET parameters

Medium · published April 18, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords via reading log files.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00223 · 12.2th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-598 · Use of HTTP Request With Sensitive Query String
Published
2023-04-18T18:57Z
EPSS history
Timeline
  • 18 APR 18:57Z
    Site-Passwords in GET parameters
    cvelistv5