CVE-2025-64996 — Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output

CVE-2025-64996

Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output PUBLISHED

Description (CNA)

In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mk_inotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially leading to unauthorized access to or modification of monitoring data.

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.4.0 before 2.4.0p16; affected 2.3.0 before 2.3.0p41; affected 2.2.0; affected 2.1.0

CWE

CWE-732

References

https://checkmk.com/werk/18570

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.