PT-2023-23230 · Apache · Apache Http Server
CVE-2023-31207
·
Publicado
2023-05-02
·
Atualizado
2024-07-23
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Checkmk versions 2.1.0 through 2.1.0p26
Checkmk versions 2.0.0 through 2.0.0p35
Checkmk versions 2.2.0b6 and earlier
Description
The issue involves the transmission of credentials within query parameters, potentially causing the automation user's secret to be written to the site Apache access log.
Recommendations
For Checkmk versions 2.1.0 through 2.1.0p26, update to a version later than 2.1.0p26 to resolve the issue.
For Checkmk versions 2.0.0 through 2.0.0p35, update to a version later than 2.0.0p35 to resolve the issue.
For Checkmk versions 2.2.0b6 and earlier, update to a version later than 2.2.0b6 to resolve the issue.
Correção
Insertion into Log File
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Http Server