medium5.5
CVE-2025-32915
Packages downloaded by Checkmk's automatic agent updates on Linux and Solaris have incorrect permissions in Checkmk < 2.4.0p1, < 2.3.0p32, < 2.2.0p42 and <= 2.…
Impact
Packages downloaded by Checkmk's automatic agent updates on Linux and Solaris have incorrect permissions in Checkmk < 2.4.0p1, < 2.3.0p32, < 2.2.0p42 and <= 2.1.0p49 (EOL). This allows a local attacker to read sensitive data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Checkmk | Checkmk | Versions 2.1.0, 2.2.0, 2.3.0, 2.4.0 |