CVE-2024-47094: Logging of sitesecret to automations log
Published Nov 29, 2024
·Updated
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p22, <2.2.0p37, <2.1.0p50 (EOL) causes remote site secrets to be written to web log files accessible to local site users.
Affected Software
75 affected components
CheckMK Checkmk=2.1.0
CheckMK Checkmk=2.2.0
CheckMK Checkmk=2.2.0-b1
CheckMK Checkmk=2.2.0-b2
CheckMK Checkmk=2.2.0-b3
CheckMK Checkmk=2.2.0-b4
CheckMK Checkmk=2.2.0-b5
CheckMK Checkmk=2.2.0-b6
CheckMK Checkmk=2.2.0-b7
CheckMK Checkmk=2.2.0-b8
CheckMK Checkmk=2.2.0-i1
CheckMK Checkmk=2.2.0-p1
CheckMK Checkmk=2.2.0-p10
CheckMK Checkmk=2.2.0-p11
CheckMK Checkmk=2.2.0-p12
CheckMK Checkmk=2.2.0-p13
CheckMK Checkmk=2.2.0-p14
CheckMK Checkmk=2.2.0-p15
CheckMK Checkmk=2.2.0-p16
CheckMK Checkmk=2.2.0-p17
CheckMK Checkmk=2.2.0-p18
CheckMK Checkmk=2.2.0-p19
CheckMK Checkmk=2.2.0-p2
CheckMK Checkmk=2.2.0-p20
CheckMK Checkmk=2.2.0-p21
CheckMK Checkmk=2.2.0-p22
CheckMK Checkmk=2.2.0-p23
CheckMK Checkmk=2.2.0-p24
CheckMK Checkmk=2.2.0-p25
CheckMK Checkmk=2.2.0-p26
CheckMK Checkmk=2.2.0-p27
CheckMK Checkmk=2.2.0-p28
CheckMK Checkmk=2.2.0-p29
CheckMK Checkmk=2.2.0-p3
CheckMK Checkmk=2.2.0-p30
CheckMK Checkmk=2.2.0-p31
CheckMK Checkmk=2.2.0-p32
CheckMK Checkmk=2.2.0-p33
CheckMK Checkmk=2.2.0-p34
CheckMK Checkmk=2.2.0-p35
CheckMK Checkmk=2.2.0-p36
CheckMK Checkmk=2.2.0-p4
CheckMK Checkmk=2.2.0-p5
CheckMK Checkmk=2.2.0-p6
CheckMK Checkmk=2.2.0-p7
CheckMK Checkmk=2.2.0-p8
CheckMK Checkmk=2.2.0-p9
CheckMK Checkmk=2.3.0
CheckMK Checkmk=2.3.0-b1
CheckMK Checkmk=2.3.0-b2
CheckMK Checkmk=2.3.0-b3
CheckMK Checkmk=2.3.0-b4
CheckMK Checkmk=2.3.0-b5
CheckMK Checkmk=2.3.0-b6
CheckMK Checkmk=2.3.0-p1
CheckMK Checkmk=2.3.0-p10
CheckMK Checkmk=2.3.0-p11
CheckMK Checkmk=2.3.0-p12
CheckMK Checkmk=2.3.0-p13
CheckMK Checkmk=2.3.0-p14
CheckMK Checkmk=2.3.0-p15
CheckMK Checkmk=2.3.0-p16
CheckMK Checkmk=2.3.0-p17
CheckMK Checkmk=2.3.0-p18
CheckMK Checkmk=2.3.0-p19
CheckMK Checkmk=2.3.0-p2
CheckMK Checkmk=2.3.0-p20
CheckMK Checkmk=2.3.0-p21
CheckMK Checkmk=2.3.0-p3
CheckMK Checkmk=2.3.0-p4
CheckMK Checkmk=2.3.0-p5
CheckMK Checkmk=2.3.0-p6
CheckMK Checkmk=2.3.0-p7
CheckMK Checkmk=2.3.0-p8
CheckMK Checkmk=2.3.0-p9
Event History
Nov 29, 2024
CVE Published
via MITRE·09:52 AM
Data Sourced
via MITRE·09:52 AM
DescriptionWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-47094?
CVE-2024-47094 has been classified with a high severity due to the potential exposure of sensitive data.
2
How do I fix CVE-2024-47094?
To fix CVE-2024-47094, upgrade to Checkmk version 2.3.0p22 or later.
3
What versions of Checkmk are affected by CVE-2024-47094?
CVE-2024-47094 affects Checkmk versions earlier than 2.3.0p22, 2.2.0p37, and 2.1.0p50.
4
What type of vulnerability is CVE-2024-47094?
CVE-2024-47094 is an information disclosure vulnerability that causes sensitive site secrets to be logged.
5
Who is affected by CVE-2024-47094?
Local site users may be at risk due to their access to web log files containing sensitive information.