Skip to content
OpenAdvisories

Weakness (CWE)

CWE-446: UI Discrepancy for Security Feature

Class Incomplete

The user interface does not correctly enable or configure a security feature, but the interface provides feedback that causes the user to believe that the feature is in a secure state.

Source: MITRE CWE-446

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2023-1768

    Symmetric agent data encryption fails silently

    Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.

    Tribe29 Checkmk check-mk Ubuntu