Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-64997

Insufficient permission validation when showing agent information

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Checkmk

Description

Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Checkmk GmbH Checkmk

Default version status: unaffected

  • 2.4.0 to < 2.4.0p17affected
  • 2.3.0 to < 2.3.0p42affected

References