CVE:CVE-2017-14955
CNNVD:CNNVD-201710-457
Mathias Kettner Check_MK是德国Mathias Kettner公司的一套开源、通用的Nagios/Icinga（监视系统）数据采集插件，它通过采用新的方法从操作系统和网络组件中收集数据，并支持自动检测主机上的监控项目。
Mathias Kettner Check_MK 1.2.8p26中存在信息泄露漏洞。远程攻击者可通过读取GUI崩溃报告利用该漏洞获取敏感的用户信息。
solution:Upgrade tribe29 checkmk to a higher version than 1.2.3:i6,1.2.3:i7,1.2.4:b1,1.2.5:i1,1.2.5:i2,1.2.5:i3,1.2.5:i4,1.2.5:i5,1.2.5:i6,1.2.6:b1,1.2.6:b2,1.2.6:p13,1.2.7:i1,1.2.7:i1p2,1.2.7:i2,1.2.7:i3,1.2.7:i4,1.2.8:p18,1.2.8:p25,and avoid the version 1.2.3:i6,1.2.3:i7,1.2.4:b1,1.2.5:i1,1.2.5:i2,1.2.5:i3,1.2.5:i4,1.2.5:i5,1.2.5:i6,1.2.6:b1,1.2.6:b2,1.2.6:p13,1.2.7:i1,1.2.7:i1p2,1.2.7:i2,1.2.7:i3,1.2.7:i4,1.2.8:p18,1.2.8:p25