CVE-2025-3506 — Potentially senitive path exposed via unauthenticated http route

CVE-2025-3506

Potentially senitive path exposed via unauthenticated http route PUBLISHED

Description (CNA)

Files to be deployed with agents are accessible without authentication in Checkmk 2.1.0, Checkmk 2.2.0, Checkmk 2.3.0 and <Checkmk 2.4.0b6 allows attacker to access files that could contain secrets.

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.4.0 before 2.4.0b6; affected 2.3.0; affected 2.2.0; affected 2.1.0 through 2.1.0p50

CWE

CWE-497

References

https://checkmk.com/werk/17348

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.