CVE-2023-1768: Checkmk

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.

Affected products

• Checkmk Checkmk: version 1.6.0 only; version 2.0.0 only; version 2.1.0 only; version 2.2.0 only
• TRIBE29 Checkmk: version 1.6.0b10 only; version 1.6.0b11 only; version 1.6.0p10 only; version 1.6.0p11 only; version 1.6.0p12 only; version 1.6.0p13 only; …

Published 2023-04-04. Last modified 2026-06-17.