[checkmk-commits] [tribe29/checkmk] 4cd272: 14871 SEC Windows agent's ProgramData directory is...

Branch: refs/heads/2.1.0 Home: https://github.com/tribe29/checkmk Commit: 4cd272d69cc91389704cbe71a6d5e7b28808c8c2 https://github.com/tribe29/checkmk/commit/4cd272d69cc91389704cbe71a6d5e7b28… Author: Sergey Kipnis <sergey.kipnis(a)tribe29.com> Date: 2022-10-14 (Fri, 14 Oct 2022) Changed paths: A .werks/14871 M agents/wnx/src/engine/cma_core.cpp Log Message: ----------- 14871 SEC Windows agent's ProgramData directory is accessible only with admins permissions Previous to this Werk every authenticated Windows user could read some sensitive data from the Windows agent working directory. To prevent issues with leaking sensitive data we restrict the permission to read data of the Windows agent. CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/…) Change-Id: Ie8ffb02d53df05d6873bf7bac50221760ff842cf