{"id":"CVE-2024-47094","aliases":["EUVD-2024-42778","GHSA-f63f-f9wj-5wjg","UBUNTU-CVE-2024-47094"],"status":"published","title":"Logging of sitesecret to automations log","description":"Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions \u003c2.3.0p22, \u003c2.2.0p37, \u003c2.1.0p50 (EOL) causes remote site secrets to be written to web log files accessible to local site users.","severity":{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00213,"percentile":0.11708,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-532"],"published":"2024-11-29T09:52:18Z","modified":"2026-10-28T02:31:06Z","affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"check-mk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.6p5-1","1.2.6p12-1","1.2.6p12-1ubuntu0.16.04.1","1.2.6p12-1ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"check-mk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.8p16-1ubuntu0.1","1.2.8p16-1ubuntu0.2"]}],"products":[{"vendor":"checkmk","product":"checkmk"},{"vendor":"checkmk gmbh","product":"checkmk"}],"references":[{"url":"https://checkmk.com/werk/17342","tags":["Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47094","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-f63f-f9wj-5wjg"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47094.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-47094","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47094","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-47094","title":"Logging of sitesecret to automations log","description":"Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions \u003c2.3.0p22, \u003c2.2.0p37, \u003c2.1.0p50 (EOL) causes remote site secrets to be written to web log files accessible to local site users.","status":"published","published":"2024-11-29T09:52:18.988Z","modified":"2025-09-11T07:16:20.513Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:33:57.302325Z"}],"euvd":[{"id":"EUVD-2024-42778","description":"Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions \u003c2.3.0p22, \u003c2.2.0p37, \u003c2.1.0p50 (EOL) causes remote site secrets to be written to web log files accessible to local site users.","status":"published","published":"2024-11-29T09:52:18Z","modified":"2025-09-11T07:16:20Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T20:31:45.093776Z"}],"ghsa":[{"id":"GHSA-f63f-f9wj-5wjg","title":"Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions \u003c2.3.0p22, \u003c2...","description":"Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions \u003c2.3.0p22, \u003c2.2.0p37, \u003c2.1.0p50 (EOL) causes remote site secrets to be written to web log files accessible to local site users.","status":"published","published":"2024-11-29T12:31:49Z","modified":"2024-12-03T21:31:21Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:59:02.175785Z"}],"nvd":[{"id":"CVE-2024-47094","description":"Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions \u003c2.3.0p22, \u003c2.2.0p37, \u003c2.1.0p50 (EOL) causes remote site secrets to be written to web log files accessible to local site users.","status":"published","published":"2024-11-29T10:15:10.657Z","modified":"2026-06-17T07:56:32.263Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:10:38.973941Z"}],"osv":[{"id":"CVE-2024-47094","title":"Logging of sitesecret to automations log","description":"Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions \u003c2.3.0p22, \u003c2.2.0p37, \u003c2.1.0p50 (EOL) causes remote site secrets to be written to web log files accessible to local site users.","status":"published","published":"2024-11-29T09:52:18.988Z","modified":"2026-10-28T02:31:06.476004934Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T15:44:43.253252Z"},{"id":"UBUNTU-CVE-2024-47094","description":"Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions \u003c2.3.0p22, \u003c2.2.0p37, \u003c2.1.0p50 (EOL) causes remote site secrets to be written to web log files accessible to local site users.","status":"published","published":"2024-11-29T10:15:00Z","modified":"2025-10-24T05:12:56Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T16:55:02.636559Z"}]}}