CVE-2023-1768

Symmetric agent data encryption fails silently

Published Apr 4, 2023 CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed
Description
Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-23979 Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.
References
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Tribe29
Published
Updated
Feb 11, 2025, 5:07 PM
Reserved
Mar 31, 2023, 8:10 AM
Status
Modified
Published
Apr 4, 2023, 7:15 AM
Modified
Jun 17, 2026, 5:28 AM