CVE-2024-6572 — Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'

CVE-2024-6572

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' PUBLISHED

Description (CNA)

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.3.0 before 2.3.0p15; affected 2.2.0 before 2.2.0p33; affected 2.1.0 before 2.1.0p48; affected 2.0.0 through 2.0.0p39

CWE

CWE-322

References

https://checkmk.com/werk/17148

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.