CVE-2023-1768

Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.

Scoring

Severity

LOW

CVSS base score

3.7

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS probability

0.22%

CWE

CWE-446

Published

2023-04-04

Last modified

2026-03-13

Affected products

• Tribe29 Checkmk
• Tribe29 Checkmk
• Tribe29 Checkmk
• Tribe29 Checkmk

Weakness type

• CWE-446

Related vulnerabilities

• CVE-2025-8353 — UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions...
• CVE-2025-52983 — Junos OS: After removing ssh public key authentication root can still log in

Markdown version · Browse all CVEs