CVE-2023-22307

Name of the Vulnerable Software and Affected Versions Tribe29 Checkmk Appliance versions prior to 1.6.4

Description The issue allows a local attacker to retrieve passwords by reading log files, specifically due to sensitive data exposure in Webconf. This can lead to unauthorized access to sensitive information.

Recommendations For versions prior to 1.6.4, update to version 1.6.4 or later to resolve the issue. As a temporary workaround, consider restricting access to log files to minimize the risk of exploitation.