CVE-2023-1768

5.3 mediumEPSS 0.9%

Medium (5.3). EPSS 0.9% chance of exploitation in the next 30 days.

Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-446
Published: 2023-04-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

checkmk:checkmk
tribe29:checkmk

References

https://checkmk.com/werk/15423
https://checkmk.com/werk/15423

Check your stack JSON