CVE-2024-38862: SNMP and IMPI secrets written to audit log
Published Oct 14, 2024
·Updated
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35, <2.1.0p48 and <=2.0.0p39 (EOL) causes SNMP and IMPI secrets of host and folder properties to be written to audit log files accessible to administrators.
Affected Software
127 affected components
CheckMK Checkmk=2.0.0
CheckMK Checkmk=2.1.0
CheckMK Checkmk=2.1.0-b1
CheckMK Checkmk=2.1.0-b2
CheckMK Checkmk=2.1.0-b3
CheckMK Checkmk=2.1.0-b4
CheckMK Checkmk=2.1.0-b5
CheckMK Checkmk=2.1.0-b6
CheckMK Checkmk=2.1.0-b7
CheckMK Checkmk=2.1.0-b8
CheckMK Checkmk=2.1.0-b9
CheckMK Checkmk=2.1.0-p1
CheckMK Checkmk=2.1.0-p10
CheckMK Checkmk=2.1.0-p11
CheckMK Checkmk=2.1.0-p12
CheckMK Checkmk=2.1.0-p13
CheckMK Checkmk=2.1.0-p14
CheckMK Checkmk=2.1.0-p15
CheckMK Checkmk=2.1.0-p16
CheckMK Checkmk=2.1.0-p17
CheckMK Checkmk=2.1.0-p18
CheckMK Checkmk=2.1.0-p19
CheckMK Checkmk=2.1.0-p2
CheckMK Checkmk=2.1.0-p20
CheckMK Checkmk=2.1.0-p21
CheckMK Checkmk=2.1.0-p22
CheckMK Checkmk=2.1.0-p23
CheckMK Checkmk=2.1.0-p24
CheckMK Checkmk=2.1.0-p25
CheckMK Checkmk=2.1.0-p26
CheckMK Checkmk=2.1.0-p27
CheckMK Checkmk=2.1.0-p28
CheckMK Checkmk=2.1.0-p29
CheckMK Checkmk=2.1.0-p3
CheckMK Checkmk=2.1.0-p30
CheckMK Checkmk=2.1.0-p31
CheckMK Checkmk=2.1.0-p32
CheckMK Checkmk=2.1.0-p33
CheckMK Checkmk=2.1.0-p34
CheckMK Checkmk=2.1.0-p35
CheckMK Checkmk=2.1.0-p36
CheckMK Checkmk=2.1.0-p37
CheckMK Checkmk=2.1.0-p38
CheckMK Checkmk=2.1.0-p39
CheckMK Checkmk=2.1.0-p4
CheckMK Checkmk=2.1.0-p40
CheckMK Checkmk=2.1.0-p41
CheckMK Checkmk=2.1.0-p42
CheckMK Checkmk=2.1.0-p43
CheckMK Checkmk=2.1.0-p44
CheckMK Checkmk=2.1.0-p45
CheckMK Checkmk=2.1.0-p46
CheckMK Checkmk=2.1.0-p47
CheckMK Checkmk=2.1.0-p48
CheckMK Checkmk=2.1.0-p5
CheckMK Checkmk=2.1.0-p6
CheckMK Checkmk=2.1.0-p7
CheckMK Checkmk=2.1.0-p8
CheckMK Checkmk=2.1.0-p9
CheckMK Checkmk=2.2.0
CheckMK Checkmk=2.2.0-b1
CheckMK Checkmk=2.2.0-b2
CheckMK Checkmk=2.2.0-b3
CheckMK Checkmk=2.2.0-b4
CheckMK Checkmk=2.2.0-b5
CheckMK Checkmk=2.2.0-b6
CheckMK Checkmk=2.2.0-b7
CheckMK Checkmk=2.2.0-b8
CheckMK Checkmk=2.2.0-i1
CheckMK Checkmk=2.2.0-p1
CheckMK Checkmk=2.2.0-p10
CheckMK Checkmk=2.2.0-p11
CheckMK Checkmk=2.2.0-p12
CheckMK Checkmk=2.2.0-p13
CheckMK Checkmk=2.2.0-p14
CheckMK Checkmk=2.2.0-p15
CheckMK Checkmk=2.2.0-p16
CheckMK Checkmk=2.2.0-p17
CheckMK Checkmk=2.2.0-p18
CheckMK Checkmk=2.2.0-p19
CheckMK Checkmk=2.2.0-p2
CheckMK Checkmk=2.2.0-p20
CheckMK Checkmk=2.2.0-p21
CheckMK Checkmk=2.2.0-p22
CheckMK Checkmk=2.2.0-p23
CheckMK Checkmk=2.2.0-p24
CheckMK Checkmk=2.2.0-p25
CheckMK Checkmk=2.2.0-p26
CheckMK Checkmk=2.2.0-p27
CheckMK Checkmk=2.2.0-p28
CheckMK Checkmk=2.2.0-p29
CheckMK Checkmk=2.2.0-p3
CheckMK Checkmk=2.2.0-p30
CheckMK Checkmk=2.2.0-p31
CheckMK Checkmk=2.2.0-p32
CheckMK Checkmk=2.2.0-p33
CheckMK Checkmk=2.2.0-p34
CheckMK Checkmk=2.2.0-p4
CheckMK Checkmk=2.2.0-p5
CheckMK Checkmk=2.2.0-p6
CheckMK Checkmk=2.2.0-p7
CheckMK Checkmk=2.2.0-p8
CheckMK Checkmk=2.2.0-p9
CheckMK Checkmk=2.3.0
CheckMK Checkmk=2.3.0-b1
CheckMK Checkmk=2.3.0-b2
CheckMK Checkmk=2.3.0-b3
CheckMK Checkmk=2.3.0-b4
CheckMK Checkmk=2.3.0-b5
CheckMK Checkmk=2.3.0-b6
CheckMK Checkmk=2.3.0-p1
CheckMK Checkmk=2.3.0-p10
CheckMK Checkmk=2.3.0-p11
CheckMK Checkmk=2.3.0-p12
CheckMK Checkmk=2.3.0-p13
CheckMK Checkmk=2.3.0-p14
CheckMK Checkmk=2.3.0-p15
CheckMK Checkmk=2.3.0-p16
CheckMK Checkmk=2.3.0-p17
CheckMK Checkmk=2.3.0-p2
CheckMK Checkmk=2.3.0-p3
CheckMK Checkmk=2.3.0-p4
CheckMK Checkmk=2.3.0-p5
CheckMK Checkmk=2.3.0-p6
CheckMK Checkmk=2.3.0-p7
CheckMK Checkmk=2.3.0-p8
CheckMK Checkmk=2.3.0-p9
Event History
Oct 14, 2024
CVE Published
via MITRE·07:19 AM
Data Sourced
via MITRE·07:19 AM
DescriptionWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-38862?
CVE-2024-38862 has been assigned a medium severity level due to the exposure of sensitive information in log files.
2
How do I fix CVE-2024-38862?
To fix CVE-2024-38862, update your Checkmk installation to version 2.3.0p18 or newer, or the respective patched versions for earlier releases.
3
What information is exposed in CVE-2024-38862?
CVE-2024-38862 allows for the exposure of SNMP and IMPI secrets from host and folder properties in audit log files.
4
Which versions of Checkmk are affected by CVE-2024-38862?
CVE-2024-38862 affects Checkmk versions older than 2.3.0p18, 2.2.0p35, 2.1.0p48, and 2.0.0p39.
5
Who is potentially affected by CVE-2024-38862?
Administrators of affected Checkmk versions could be impacted by CVE-2024-38862 due to unauthorized access to sensitive log information.