Skip to content
OpenAdvisories
Medium WID-SEC-2025-2617 3 CVEs

Checkmk: Mehrere Schwachstellen

Published Nov 17, 2025 · Updated Nov 18, 2025 · Revision 2 · de-DE

Vendor: Checkmk Product: Checkmk

Summary

Ein entfernter, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.

Product

Checkmk ist eine IT-Monitoring-Software.

Vulnerabilities 3

  • Medium 5.3
    CVE-2025-58121

    Insufficient permission validation on multiple REST API endpoints

    Insufficient permission validation on multiple REST API endpoints in Checkmk 2.2.0, 2.3.0, and 2.4.0 before version 2.4.0p16 allows low-privileged users to perform unauthorized actions or obtain sensitive information

    Checkmk Checkmk check-mk Ubuntu
  • Medium 5.3
    CVE-2025-58122

    Insufficient permission validation when configuring notification parameters

    Insufficient permission validation in Checkmk 2.4.0 before version 2.4.0p16 allows low-privileged users to modify notification parameters via the REST API, which could lead to unauthorized actions or information disclosure.

    Checkmk Checkmk check-mk Ubuntu
  • Medium 4.8
    CVE-2025-64996

    Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output

    In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mk_inotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially leading to …

    Checkmk Checkmk check-mk Ubuntu

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-198049, EUVD-2025-198047, EUVD-2025-198048

  2. #1

    Initiale Fassung

References