Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2025-65000

Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Checkmk

Description

SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Checkmk GmbH Checkmk

Default version status: unaffected

  • 2.4.0 to < 2.4.0p18affected
  • 2.3.0affected

References