CVE-2023-1768: checkmk UI Discrepancy for Security Feature
CVSS: 5.3v3.1MediumModified
AliasesUBUNTU-CVE-2023-1768
Published 04-04-2023Last modified 11-02-2025
Vulnerability summary
CVE-2023-1768 is a medium (CVSS 5.3) UI Discrepancy for Security Feature vulnerability in checkmk. EPSS estimates a 0.91% chance of exploitation in the next 30 days, higher than 59.6% of scored vulnerabilities.
CVSS score
5.3/10
010
Medium · v3.1 (NVD)EPSS score
0.91%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 04-04-2023PublishedVulnerability first disclosed.
- 11-02-2025Last modifiedVulnerability information updated.
Description
Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.
CVSS metrics
3 scores · 3 sources · 1 versionMedium 5.3Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NSources3 sources · 3.7–5.3
- CVE.orgCNA3.7LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NDiffers
- OSV · UbuntuEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS trend
Probability
0.91%
Chance of exploitation in the next 30 days
Percentile
60%
Versus all other CVEs
30-day change
0.00 pp
From 0.91% on 21-09-2026
21-09-202621-10-2026
EPSS score0.91%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Checkmk1 product
- checkmkEOL1.6.0 | 1.6.0:b1 | 1.6.0:b10 | 1.6.0:b11 | 1.6.0:b12 | 1.6.0:b2 | 1.6.0:b3 | 1.6.0:b4 | 1.6.0:b5 | 1.6.0:b6 | 1.6.0:b7 | 1.6.0:b8 | 1.6.0:b9 | 1.6.0:p1 | 1.6.0:p10 | 1.6.0:p11 | 1.6.0:p12 | 1.6.0:p13 | 1.6.0:p14 | 1.6.0:p15 | 1.6.0:p16 | 1.6.0:p17 | 1.6.0:p18 | 1.6.0:p19 | 1.6.0:p2 | 1.6.0:p20 | 1.6.0:p21 | 1.6.0:p22 | 1.6.0:p23 | 1.6.0:p24 | 1.6.0:p25 | 1.6.0:p26 | 1.6.0:p27 | 1.6.0:p28 | 1.6.0:p29 | 1.6.0:p3 | 1.6.0:p4 | 1.6.0:p5 | 1.6.0:p6 | 1.6.0:p7 | 1.6.0:p8 | 1.6.0:p9 | 2.0.0 | 2.0.0:b1 | 2.0.0:b2 | 2.0.0:b3 | 2.0.0:b4 | 2.0.0:b5 | 2.0.0:b6 | 2.0.0:b7 | 2.0.0:b8 | 2.0.0:i1 | 2.0.0:p1 | 2.0.0:p10 | 2.0.0:p11 | 2.0.0:p12 | 2.0.0:p13 | 2.0.0:p14 | 2.0.0:p15 | 2.0.0:p16 | 2.0.0:p17 | 2.0.0:p18 | 2.0.0:p19 | 2.0.0:p2 | 2.0.0:p20 | 2.0.0:p21 | 2.0.0:p22 | 2.0.0:p23 | 2.0.0:p24 | 2.0.0:p25 | 2.0.0:p26 | 2.0.0:p27 | 2.0.0:p28 | 2.0.0:p29 | 2.0.0:p3 | 2.0.0:p30 | 2.0.0:p31 | 2.0.0:p32 | 2.0.0:p33 | 2.0.0:p34 | 2.0.0:p4 | 2.0.0:p5 | 2.0.0:p6 | 2.0.0:p7 | 2.0.0:p8 | 2.0.0:p9 | 2.1.0 | 2.1.0:b1 | 2.1.0:b2 | 2.1.0:b3 | 2.1.0:b4 | 2.1.0:b5 | 2.1.0:b6 | 2.1.0:b7 | 2.1.0:b8 | 2.1.0:b9 | 2.1.0:p1 | 2.1.0:p10 | 2.1.0:p11 | 2.1.0:p12 | 2.1.0:p13 | 2.1.0:p14 | 2.1.0:p15 | 2.1.0:p16 | 2.1.0:p17 | 2.1.0:p18 | 2.1.0:p2 | 2.1.0:p20 | 2.1.0:p21 | 2.1.0:p22 | 2.1.0:p23 | 2.1.0:p24 | 2.1.0:p25 | 2.1.0:p3 | 2.1.0:p4 | 2.1.0:p5 | 2.1.0:p6 | 2.1.0:p7 | 2.1.0:p8 | 2.1.0:p9 | 2.2.0 | 2.2.0:b1 | 2.2.0:b2 | 2.2.0:b3
Tribe291 product
- checkmk≥ 2.2.0, ≤ 2.2.0b3 | ≥ 2.1.0, ≤ 2.1.0p25 | ≥ 2.0.0, ≤ 2.0.0p34 | ≥ 1.6.0, ≤ 1.6.0p30 | 1.6.0b10 | 1.6.0b11 | 1.6.0p10 | 1.6.0p11 | 1.6.0p12 | 1.6.0p13 | 1.6.0p14 | 1.6.0p15 | 1.6.0p16 | 1.6.0p17 | 1.6.0p18
Ubuntu1 product
- check-mkAll versions (No fix recorded)
3 vendors · 3 products