NetSight
low3.7

CVE-2023-1768

Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption …

Impact

Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.

Affected products

VendorProductAffected versions
CheckmkCheckmk
Versions 1.6.0, 2.0.0, 2.1.0, 2.2.0
Tribe29Checkmk
Versions 1.6.0b10, 1.6.0b11, 1.6.0p10, 1.6.0p11, 1.6.0p12, 1.6.0p13

Weakness classification

References