CVE-2022-48319

Host secret disclosed in Checkmk logs

Published Feb 20, 2023 CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Description
Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to gain access to the host secret through the unprotected agent updater log file.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-51019 Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to gain access to the host secret through the unprotected agent updater log file.
References
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Tribe29
Published
Updated
Mar 12, 2025, 2:00 PM
Reserved
Feb 8, 2023, 8:46 AM
Status
Modified
Published
Feb 20, 2023, 5:15 PM
Modified
Jun 17, 2026, 5:14 AM