{"id":"CVE-2017-14955","details":"Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain sensitive user information by reading a GUI crash report.","modified":"2026-07-08T05:55:35.375701903Z","published":"2017-10-02T01:29:00.390Z","database_specific":{"unresolved_ranges":[{"vendor_product":"checkmk:checkmk","cpes":["cpe:2.3:a:checkmk:checkmk:1.2.7:i4:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.2.7-i4"},{"last_affected":"1.2.7-i4"}],"source":"CPE_STRING"}]},"references":[{"type":"ADVISORY","url":"http://mathias-kettner.com/check_mk_werks.php?edition_id=raw&branch=1.2.8"},{"type":"ADVISORY","url":"https://mathias-kettner.de/check_mk_werks.php?werk_id=5208&HTML=yes"},{"type":"ADVISORY","url":"https://www.exploit-db.com/exploits/43021/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/checkmk/checkmk","events":[{"introduced":"4dd7a3b115e8b3bae043ff01b2a81df96118f9a7"},{"last_affected":"7587c8acc9c3c1dd4913eb832e32149c507efc66"}],"database_specific":{"cpe":["cpe:2.3:a:checkmk:checkmk:1.2.3:i6:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.3:i7:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.4:b1:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.5:i1:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.5:i2:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.5:i3:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.5:i4:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.5:i5:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.5:i6:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.6:b1:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.6:b2:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.6:p13:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.7:i1:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.7:i1p2:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.7:i2:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.7:i3:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.8:p18:*:*:*:*:*:*","cpe:2.3:a:checkmk:checkmk:1.2.8:p25:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.2.3-i6"},{"last_affected":"1.2.3-i6"},{"introduced":"1.2.3-i7"},{"last_affected":"1.2.3-i7"},{"introduced":"1.2.4-b1"},{"last_affected":"1.2.4-b1"},{"introduced":"1.2.5-i1"},{"last_affected":"1.2.5-i1"},{"introduced":"1.2.5-i2"},{"last_affected":"1.2.5-i2"},{"introduced":"1.2.5-i3"},{"last_affected":"1.2.5-i3"},{"introduced":"1.2.5-i4"},{"last_affected":"1.2.5-i4"},{"introduced":"1.2.5-i5"},{"last_affected":"1.2.5-i5"},{"introduced":"1.2.5-i6"},{"last_affected":"1.2.5-i6"},{"introduced":"1.2.6-b1"},{"last_affected":"1.2.6-b1"},{"introduced":"1.2.6-b2"},{"last_affected":"1.2.6-b2"},{"introduced":"1.2.6-p13"},{"last_affected":"1.2.6-p13"},{"introduced":"1.2.7-i1"},{"last_affected":"1.2.7-i1"},{"introduced":"1.2.7-i1p2"},{"last_affected":"1.2.7-i1p2"},{"introduced":"1.2.7-i2"},{"last_affected":"1.2.7-i2"},{"introduced":"1.2.7-i3"},{"last_affected":"1.2.7-i3"},{"introduced":"1.2.8-p18"},{"last_affected":"1.2.8-p18"},{"introduced":"1.2.8-p25"},{"last_affected":"1.2.8-p25"}],"source":"CPE_STRING"}}],"versions":["1.2.3-i6","1.2.3-i7","1.2.4-b1","1.2.5-i1","1.2.5-i2","1.2.5-i3","1.2.5-i4","1.2.5-i5","1.2.5-i6","1.2.6-b1","1.2.6-b2","1.2.6-p13","1.2.7-i1","1.2.7-i1p2","1.2.7-i2","1.2.7-i3","1.2.8-p18","1.2.8-p25","v1.2.8p25","v1.2.8p24","v1.2.8p23","v1.2.8p22","v1.2.8p21","v1.2.8p20","v1.2.8p19","v1.2.8p18","v1.2.8p17","v1.2.8p16","v1.2.8p15","v1.2.8p14","v1.2.8p13","v1.2.8p12","v1.2.8p11","v1.2.8p10","v1.2.8p9","v1.2.8p8","v1.2.8p7","v1.2.8p6","v1.2.8p5","v1.2.8p4","v1.2.8p3","v1.2.8p2","v1.2.8p1","v1.2.8","v1.2.8b13","v1.2.8b12","v1.2.8b11","v1.2.8b10","v1.2.8b9","v1.2.8b8","v1.2.8b7","v1.2.8b6","v1.2.8b5","v1.2.8b4","v1.2.8b3","v1.2.8b2","v1.2.8b1","v1.2.5i6","v1.2.5i1","v1.2.3i6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14955.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}