CVE-2024-38862: Checkmk

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p18, <2.2.0p35, <2.1.0p48 and <=2.0.0p39 (EOL) causes SNMP and IMPI secrets of host and folder properties to be written to audit log files accessible to administrators.

Affected products

• Checkmk Checkmk: version 2.0.0 only; version 2.1.0 only; version 2.2.0 only; version 2.3.0 only

Published 2024-10-14. Last modified 2026-06-17.