CVE-2023-6287: Backup password in GET parameter
Published Nov 27, 2023
·Updated
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files.
Affected Software
1 affected component
Tribe29 Checkmk Appliance Firmware<1.6.8
Event History
Nov 27, 2023
CVE Published
02:04 PM
Data Sourced
02:04 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-6287?
CVE-2023-6287 is a vulnerability that allows a local attacker to retrieve passwords via reading log files in Tribe29 Checkmk Appliance before version 1.6.8.
2
How severe is the CVE-2023-6287 vulnerability?
The severity of CVE-2023-6287 is medium, with a CVSS score of 5.5.
3
How does CVE-2023-6287 affect Tribe29 Checkmk Appliance?
CVE-2023-6287 affects Tribe29 Checkmk Appliance firmware versions up to exclusive version 1.6.8.
4
How can a local attacker exploit CVE-2023-6287?
A local attacker can exploit CVE-2023-6287 by reading log files on the Checkmk Appliance to retrieve sensitive passwords.
5
Is there a fix for CVE-2023-6287?
Yes, upgrading Tribe29 Checkmk Appliance firmware to version 1.6.8 or later will fix the CVE-2023-6287 vulnerability.