CVE-2023-6287CWE-598

Backup password in GET parameter

Low · published November 27, 2023

CVSS v3.1
3.3
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.8th percentile
Weakness
CWE-598 · Use of HTTP Request With Sensitive Query String
Published
2023-11-27T14:04Z
EPSS history
Timeline
  • 27 NOV 14:04Z
    Backup password in GET parameter
    cvelistv5