← Database

CVE-2022-48319

MEDIUM CVSS: 6.5 Published: 2023-02-20 Modified: 2026-06-17

Description

Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to gain access to the host secret through the unprotected agent updater log file.

Affected Platforms

Checkmk Checkmk

Weakness Type

CWE-200, CWE-532

References