CVE-2017-14955: Checkmk

Medium severity, CVSS 5.9. EPSS: 12.1% chance of exploitation in the next 30 days.

Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain sensitive user information by reading a GUI crash report.

Affected products

• Checkmk Checkmk: version 1.2.3 only; version 1.2.4 only; version 1.2.5 only; version 1.2.6 only; version 1.2.7 only; version 1.2.8 only

Published 2017-10-02. Last modified 2026-06-17.