CVE-2024-6572 | THREATINT

Description

Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem' in Checkmk before Checkmk 2.3.0p15, 2.2.0p33, 2.1.0p48 and 2.0.0 (EOL) allows man-in-the-middle attackers to intercept traffic

Reserved 2024-07-08 | Published 2024-09-09 | Updated 2024-09-09 | Assigner Checkmk

MEDIUM: 6.3CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N

Problem types

CWE-322: Key Exchange without Entity Authentication

Product status

Default status

unaffected

2.3.0 before 2.3.0p15

affected

2.2.0 before 2.2.0p33

affected

2.1.0 before 2.1.0p48

affected

2.0.0

affected

References

checkmk.com/werk/17148

cve.org (CVE-2024-6572)

nvd.nist.gov (CVE-2024-6572)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.