CVE-2023-6287

Name of the Vulnerable Software and Affected Versions Tribe29 Checkmk Appliance versions prior to 1.6.8

Description The issue allows a local attacker to expose sensitive data by retrieving passwords via reading log files. This is possible due to a sensitive data exposure in Webconf.

Recommendations For versions prior to 1.6.8, update to version 1.6.8 or later to resolve the issue. As a temporary workaround, consider restricting access to log files to minimize the risk of exploitation.