CVE-2017-14955 describes an information disclosure vulnerability in Check_MK versions prior to 1.2.8p26. A race condition in the failed-login save feature allows remote attackers to obtain sensitive user information by accessing GUI crash reports. This medium-severity vulnerability (CVSS 5.9) has a high confidentiality impact and low attack complexity, requiring no user interaction. While not actively exploited in the wild, an exploit (EDB-43021) is publicly available, though there is minimal community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.2.3CPE matchmatch criteria | cpe:2.3:a:checkmk:checkmk:1.2.3:i6:*:*:*:*:*:* | ||
1.2.3CPE matchmatch criteria | cpe:2.3:a:checkmk:checkmk:1.2.3:i7:*:*:*:*:*:* | ||
1.2.4CPE matchmatch criteria | cpe:2.3:a:checkmk:checkmk:1.2.4:b1:*:*:*:*:*:* | ||
1.2.5CPE matchmatch criteria | cpe:2.3:a:checkmk:checkmk:1.2.5:i1:*:*:*:*:*:* | ||
1.2.5CPE matchmatch criteria | cpe:2.3:a:checkmk:checkmk:1.2.5:i2:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.