CVE-2023-6287

LOW

Tribe29 Checkmk Appliance <1.6.8 - Info Disclosure

Title source: llm
STIX 2.1

Description

Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files.

References (1)

Core 1
Core References

Scores

CVSS v3 3.3
EPSS 0.0023
EPSS Percentile 13.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-532 CWE-598
Status published
Products (1)
tribe29/checkmk_appliance_firmware < 1.6.8
Published Nov 27, 2023
Tracked Since Feb 18, 2026