PT-2023-17228 · Checkmk · Checkmk

Published 2023-04-04 · Updated 2024-07-23 · CVE-2023-1768

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Checkmk versions 1.6.0 and earlier Checkmk versions 2.0.0 through 2.0.0p34 Checkmk versions 2.1.0 through 2.1.0p25 Checkmk versions 2.2.0b3 and earlier

Description Inappropriate error handling in Checkmk causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.

Recommendations For Checkmk version 1.6.0, update to a version that includes proper error handling to prevent silent failure of symmetric encryption. For Checkmk versions 2.0.0 through 2.0.0p34, update to a version that includes proper error handling to prevent silent failure of symmetric encryption. For Checkmk versions 2.1.0 through 2.1.0p25, update to a version that includes proper error handling to prevent silent failure of symmetric encryption. For Checkmk versions 2.2.0b3 and earlier, update to a version that includes proper error handling to prevent silent failure of symmetric encryption.

Fix

Weakness Enumeration

CWE-446

Related Identifiers

CVE-2023-1768

Affected Products

Checkmk

References · 7

• https://osv.dev/vulnerability/UBUNTU-CVE-2023-1768 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1768 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-1768 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1768 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1768 · Vendor Advisory
• https://checkmk.com/werk/15423 · Vendor Advisory
• https://t.me/cibsecurity/61370 · Telegram Post