CVE-2025-64997

Insufficient permission validation when showing agent information PUBLISHED

Description (CNA)

Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information via the REST API, which could lead to information disclosure.

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.4.0 before 2.4.0p17; affected 2.3.0 before 2.3.0p42

CWE

CWE-280

References

https://checkmk.com/werk/18681

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.