Skip to content
OpenAdvisories
Medium WID-SEC-2025-2253 3 CVEs

Checkmk: Mehrere Schwachstellen

Published Oct 9, 2025 · Updated Oct 9, 2025 · de-DE

Vendor: Checkmk Product: Checkmk Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um Informationen offenzulegen, um Sicherheitsvorkehrungen zu umgehen, und um einen Denial of Service Angriff durchzuführen.

Product

Checkmk ist eine IT-Monitoring-Software.

Vulnerabilities 3

  • High 8.8
    CVE-2025-32919

    Privilege Escalation in Windows License plugin for Checkmk Windows Agent

    Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation. This issue affects Checkmk: from 2.4.0 before 2.4.0p13, from 2.3.0 before 2.3.0p38, from 2.2.0 before 2.2.0p46, and all versions of…

    Checkmk Checkmk
  • High 7.1
    CVE-2025-39664

    Path-Traversal in report scheduler

    Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL) allows authenticated attackers to define the storage location of report file pairs beyond their intended root directory.

    Checkmk Checkmk check-mk Ubuntu
  • Low 1.0
    CVE-2025-32916

    Sensitive form data in URL query parameters

    Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as brow…

    Checkmk Checkmk check-mk Ubuntu

Revision history

  1. #1

    Initiale Fassung

References