List overview
Download

Checkmk werks security October 2022

checkmk-werks-sec@lists.checkmk.com

1 participants
1 discussions

Start a nNew thread

Checkmk Werk 14871: Windows agent's ProgramData directory is accessible only with admins permissions

by Sergey Kipnis

ID: 14871 Title: Windows agent's ProgramData directory is accessible only with admins permissions Component: Checks & agents Level: 2 Class: Security fix Version: 2.2.0i1 Previous to this Werk every authenticated Windows user could read some sensitive data from the Windows agent working directory. To prevent issues with leaking sensitive data we restrict the permission to read data of the Windows agent. CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/…)

1 year, 7 months