Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-48319
HistoryFeb 20, 2023 - 12:00 a.m.

CVE-2022-48319

2023-02-2000:00:00
ubuntu.com
ubuntu.com
14
cve-2022-48319
tribe29 checkmk
sensitive information disclosure
host security
unix

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS

0

Percentile

13.3%

Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29’s
Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0
(EOL) allows an attacker to gain access to the host secret through the
unprotected agent updater log file.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchcheck-mk< anyUNKNOWN
ubuntu16.04noarchcheck-mk< anyUNKNOWN

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS

0

Percentile

13.3%

Related for UB:CVE-2022-48319