Packages downloaded by Checkmk's automatic agent updates on Linux and Solaris have incorrect permissions in Checkmk < 2.4.0p1, < 2.3.0p32, < 2.2.0p42 and <= 2.1.0p49 (EOL). This allows a local attacker to read sensitive data.
References
| Link | Resource |
|---|---|
| https://checkmk.com/werk/17099 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
No history.
Information
Published : 2025-05-22 15:16
Updated : 2025-08-26 15:36
NVD link : CVE-2025-32915
Mitre link : CVE-2025-32915
CVE.ORG link : CVE-2025-32915
JSON object : View
Products Affected
linux
- linux_kernel
oracle
- solaris
checkmk
- checkmk
CWE
CWE-732
Incorrect Permission Assignment for Critical Resource
