Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5393-2v6g-pgwc

Опубликовано: 18 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 2.3
CVSS3: 5.3

Описание

SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed.

SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed.

EPSS

Процентиль: 9%
0.00032
Низкий

2.3 Low

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-212

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 2 месяцев назад

SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed.

CVSS3: 5.3
nvd
около 2 месяцев назад

SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed.

CVSS3: 5.3
debian
около 2 месяцев назад

SSH private keys of the "Remote alert handlers (Linux)" rule were expo ...

EPSS

Процентиль: 9%
0.00032
Низкий

2.3 Low

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-212