What’s Vulnerable › Vulnerabilities

CVE-2017-14955

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 12.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-10-02 · updated 2026-06-17
• Weakness: CWE-200

Description

Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain sensitive user information by reading a GUI crash report.

Affected products

• Checkmk GmbH Checkmk: 1.2.3-i6, 1.2.3-i7, 1.2.4-b1, 1.2.5-i1, 1.2.5-i2, 1.2.5-i3 (+13)

References

• http://mathias-kettner.com/check_mk_werks.php?edition_id=raw&branch=1.2.8
• https://mathias-kettner.de/check_mk_werks.php?werk_id=5208&HTML=yes
• https://www.exploit-db.com/exploits/43021/
• http://mathias-kettner.com/check_mk_werks.php?edition_id=raw&branch=1.2.8
• https://mathias-kettner.de/check_mk_werks.php?werk_id=5208&HTML=yes
• https://www.exploit-db.com/exploits/43021/

Get alerted when CVE-2017-14955 or the next vulnerability affects your stack