CVE-2023-1768 — Symmetric agent data encryption fails silently

CVE-2023-1768

Symmetric agent data encryption fails silently PUBLISHED

Description (CNA)

Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.

Affected (CNA)

Vendor / product	Versions
Tribe29 / Checkmk	affected 2.2.0 through 2.2.0b3; affected 2.1.0 through 2.1.0p25; affected 2.0.0 through 2.0.0p34; affected 1.6.0 through 1.6.0p30

CWE

CWE-446

References

https://checkmk.com/werk/15423

ADP enrichment

CVE

No English description supplied.

https://checkmk.com/werk/15423

CISA-ADP

No English description supplied.

No references supplied.