Unrated
Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk
CVE-2022-48319
First seen on SecPulse
Original description The description as published by the source.
Sensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to gain access to the host secret through the unprotected agent updater log file.
References
- advisory checkmk.com