PT-2024-37843 · Checkmk · Checkmk

Published 2024-10-10 · Updated 2024-10-15 · CVE-2024-6747

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.3.0p18 Checkmk versions prior to 2.2.0p36 Checkmk versions prior to 2.1.0p49 Checkmk version 2.0.0p39

Description Information leakage in mknotifyd allows an attacker to obtain potentially sensitive data. This issue exists in Checkmk versions before 2.3.0p18, 2.2.0p36, 2.1.0p49, and in 2.0.0p39.

Recommendations For versions prior to 2.3.0p18, update to version 2.3.0p18 or later. For versions prior to 2.2.0p36, update to version 2.2.0p36 or later. For versions prior to 2.1.0p49, update to version 2.1.0p49 or later. For version 2.0.0p39, consider upgrading to a supported version, as 2.0.0p39 is end of life.

Fix

Information Disclosure

Weakness Enumeration

CWE-201

CWE-200

Related Identifiers

CVE-2024-6747

Affected Products

Checkmk

References · 11

• https://osv.dev/vulnerability/CVE-2024-6747 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-6747 · Vendor Advisory
• https://checkmk.com/werk/17145 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-6747 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-6747 · Security Note
• https://ubuntu.com/security/CVE-2024-6747 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1844454249729490995 · Twitter Post
• https://twitter.com/CVEnew/status/1844284666943013069 · Twitter Post
• https://t.me/cvedetector/7571 · Telegram Post
• https://t.me/cvenotify/97723 · Telegram Post
• https://t.me/cvenotify/98062 · Telegram Post