QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-38862

Back to search

CVE-2024-38862

Published: Oct 14, 2024

Modified: Oct 14, 2024

PUBLISHED

Description

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35, <2.1.0p48 and <=2.0.0p39 (EOL) causes SNMP and IMPI secrets of host and folder properties to be written to audit log files accessible to administrators.

VendorProductVersions

Checkmk GmbH

Checkmk

affected
2.0.0 - <= 2.0.0p39
affected
2.1.0 - < 2.1.0p48
affected
2.2.0 - < 2.2.0p35
affected
2.3.0 - < 2.3.0p18

Weaknesses (CWE)

CWE-532

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now