CVE-2025-32915 — Sensitive data exposed during automatic agent updates

CVE-2025-32915

Sensitive data exposed during automatic agent updates PUBLISHED

Description (CNA)

Packages downloaded by Checkmk's automatic agent updates on Linux and Solaris have incorrect permissions in Checkmk < 2.4.0p1, < 2.3.0p32, < 2.2.0p42 and <= 2.1.0p49 (EOL). This allows a local attacker to read sensitive data.

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.4.0 before 2.4.0p1; affected 2.3.0 before 2.3.0p32; affected 2.2.0 before 2.2.0p42; affected 2.1.0

CWE

CWE-732

References

https://checkmk.com/werk/17099

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.