Checkmk werks security August 2021

checkmk-werks-sec@lists.checkmk.com

2 participants
2 discussions

Checkmk Werk 13067: Fix path traversal vulnerability

by Maximilian Wirtz

ID: 13067 Title: Fix path traversal vulnerability Component: Setup Level: 1 Class: Security fix Version: 2.1.0i1 An authenticated user was able to enumerate files ending with ".csv" on the filesystem, accessible to the siteuser.

2 years, 9 months

Checkmk Werk 12326: Windows agent binary files are code signed

by Sergey Kipnis

ID: 12326 Title: Windows agent binary files are code signed Component: Checks & agents Level: 2 Class: Security fix Version: 2.1.0i1 Since this release the following binary files are code signed with tribe29 digital certificate: <ul> <li>check_mk_agent.msi</li> <li>check_mk_agent.exe</li> <li>check_mk_agent-64.exe</li> </ul> Details of the used digital certificate: Name of signer: <tt>tribe29 GmbH</tt> Digest algorithm: <tt>SHA256</tt> Timestamp: presented

2 years, 9 months

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

Checkmk werks security August 2021