CVE-2024-47094

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.3.0p22 Checkmk versions prior to 2.2.0p37 Checkmk versions prior to 2.1.0p50 (EOL)

Description The issue concerns the insertion of sensitive information into log files in Checkmk, causing remote site secrets to be written to web log files accessible to local site users. This allows unauthorized access to confidential data.

Recommendations For versions prior to 2.3.0p22, update to version 2.3.0p22 or later to resolve the issue. For versions prior to 2.2.0p37, update to version 2.2.0p37 or later to resolve the issue. For versions prior to 2.1.0p50, since 2.1.0p50 is end of life, consider upgrading to a supported version of Checkmk, such as 2.2.0p37 or later, or 2.3.0p22 or later, to resolve the issue.