Host 62.101.235.234
Norway
-
CheckMK monitoring endpoint publicly available
An open CheckMK agent is publicly available.
This could leak sensitive information such as :
- Process list ( maybe credentials )
- Network interfaces
- Running services
- Firewall rules
- Internal OS configuration
https://docs.checkmk.com/latest/en/wato_monitoringagents.html
First seen 2022-06-17 22:54
Last seen 2023-05-04 07:05
Open for 320 days-
Severity: medium
Fingerprint: 03cb82e6f6a6b45342c4bbcb49800ff96ee1a621ba13b8df90ac1b7441f7ae7eFound public CheckMk agent: Version: 2.1.0p7 BuildDate: Jul 18 2022 AgentOS: windows Hostname: replica2 Architecture: 64bit WorkingDirectory: C:\Windows\system32 ConfigFile: C:\Program Files (x86)\checkmk\service\check_mk.yml LocalConfigFile: C:\ProgramData\checkmk\agent\check_mk.user.yml AgentDirectory: C:\Program Files (x86)\checkmk\service PluginsDirectory: C:\ProgramData\checkmk\agent\plugins StateDirectory: C:\ProgramData\checkmk\agent\state ConfigDirectory: C:\ProgramData\checkmk\agent\config TempDirectory: C:\ProgramData\checkmk\agent\tmp LogDirectory: C:\ProgramData\checkmk\agent\log SpoolDirectory: C:\ProgramData\checkmk\agent\spool LocalDirectory: C:\ProgramData\checkmk\agent\local OnlyFrom:
Found on 2022-09-24 22:26 -
Severity: high
Fingerprint: 03cb82e6f6a6b45342c4bbcbd51b336be64c18f84766364293c501e967fd33b8Found public CheckMk agent: Version: 1.2.4p5 Architecture: 32bit AgentOS: windows Hostname: replica2 WorkingDirectory: C:\Windows\system32 ConfigFile: AgentDirectory: C:\Program Files (x86)\check_mk PluginsDirectory: C:\Program Files (x86)\check_mk\plugins SpoolDirectory: C:\Program Files (x86)\check_mk\spool LocalDirectory: C:\Program Files (x86)\check_mk\local ScriptStatistics: Plugin C:0 E:0 T:0 Local C:0 E:0 T:0 OnlyFrom: 0.0.0.0/0 Found Windows process list through CheckMk: [System Process] System smss.exe csrss.exe csrss.exe wininit.exe winlogon.exe services.exe lsass.exe svchost.exe svchost.exe LogonUI.exe dwm.exe svchost.exe svchost.exe svchost.exe svchost.exe svchost.exe svchost.exe igfxCUIService.exe svchost.exe svchost.exe svchost.exe svchost.exe svchost.exe inetinfo.exe sqlservr.exe nsd.exe svchost.exe ntmulti.exe check_mk_agent.exe SUService.exe NTRTScan.exe SyncoveryService.exe SyncoveryVSS.exe sqlwriter.exe sqlbrowser.exe sshd.exe ssh-agent.exe svchost.exe svchost.exe TeamViewer_Service.exe FileZilla Server.exe Veeam.VssHwSnapshotProvider.exe tmwscsvc.exe VeeamNFSSvc.exe VeeamFilesysVssSvc.exe VeeamTransportSvc.exe Veeam.Backup.Agent.ConfigurationService.exe TmListen.exe VeeamDeploymentSvc.exe svchost.exe Veeam.Guest.Interaction.Proxy.exe conhost.exe TMBMSRV.exe svchost.exe msdtc.exe GoogleCrashHandler.exe GoogleCrashHandler64.exe Veeam.Archiver.Proxy.exe Veeam.Archiver.Service.exe Veeam.CloudBackup.PlatformService.exe Veeam.Azure.PlatformSvc.exe Veeam.Backup.RestAPIService.exe Veeam.Backup.Service.exe Veeam.Backup.UIServer.exe Veeam.Backup.ExternalInfrastructure.DbProvider.exe conhost.exe Veeam.Backup.BrokerService.exe Veeam.Backup.Satellite.exe conhost.exe Veeam.Backup.WmiServer.exe conhost.exe Veeam.Backup.CatalogDataService.exe Veeam.Backup.CloudService.exe Veeam.StandBy.Service.exe Veeam.GCP.PlatformService.WebService.exe Veeam.Backup.MountService.exe Veeam.Backup.Cdp.Service.exe PresentationFontCache.exe TmCCSF.exe csrss.exe winlogon.exe dwm.exe rdpclip.exe RuntimeBroker.exe svchost.exe sihost.exe taskhostw.exe igfxEM.exe explorer.exe ShellExperienceHost.exe SearchUI.exe Syncovery.exe SyncoveryService.exe FileZilla Server Interface.exe PccNTMon.exe ApplicationFrameHost.exe SystemSettings.exe rdpinput.exe TabTip.exe TabTip32.exe Taskmgr.exe Veeam.Backup.Manager.exe conhost.exe VeeamAgent.exe conhost.exe spoolsv.exe VeeamAgent.exe conhost.exe w3wp.exe
Found on 2022-06-17 22:54