CVE-2023-22307

—

CVSS 3.1

5.5 medium

EPSS

<1%p13

Published

Apr 18, 2023 (Apr 18, 2023)

Modified

Jun 17, 2026

Description

Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords via reading log files.

Vendors: tribe29
Products: checkmk appliance firmware
Weakness: CWE-200, CWE-598, CWE-668
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.