A vulnerability, which was classified as problematic, was found in Checkmk up to 2.0.0p39/2.1.0p47/2.2.0p32/2.3.0p14. Affected is an unknown function of the component Check SFTP Service. The manipulation leads to key exchange without entity authentication.

This vulnerability is traded as CVE-2024-6572. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to apply a patch to fix this issue.