CVE-2024-38864

Incorrect permissions on the Checkmk Windows Agent's data directory in Checkmk < 2.3.0p23, < 2.2.0p38 and <= 2.1.0p49 (EOL) allows a local attacker to read sensitive data.

Score

CVSS 4.0 4.8 Medium

Status

Analyzed - security@checkmk.com

Published

2024-12-19

Last modified

2024-12-20

Weaknesses

CWE-732

Affected products

• Checkmk (Checkmk)
• Checkmk (Checkmk Gmbh)

References

• https://checkmk.com/werk/17098