UBUNTU-CVE-2023-1768

Source
https://ubuntu.com/security/CVE-2023-1768
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-1768.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2023-1768
Related
  • CVE-2023-1768
Published
2023-04-04T07:15:00Z
Modified
2024-10-15T14:11:15Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.

References

Affected packages

Ubuntu:Pro:16.04:LTS / check-mk

Package

Name
check-mk
Purl
pkg:deb/ubuntu/check-mk?arch=src?distro=esm-apps/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.2.6p5-1
1.2.6p12-1
1.2.6p12-1ubuntu0.16.04.1
1.2.6p12-1ubuntu0.16.04.1+esm1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / check-mk

Package

Name
check-mk
Purl
pkg:deb/ubuntu/check-mk?arch=src?distro=esm-apps/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.2.8p16-1ubuntu0.1
1.2.8p16-1ubuntu0.2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}