Skip to content
OpenAdvisories
Medium WID-SEC-2025-2893 2 CVEs

Checkmk: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Dec 18, 2025 · Updated Dec 18, 2025 · de-DE

Vendor: Checkmk Product: Checkmk

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um Informationen offenzulegen.

Product

Checkmk ist eine IT-Monitoring-Software.

Vulnerabilities 2

  • Medium 6.9
    CVE-2025-39665

    Livestatus Injection in dynmaps

    User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.

    Nagvis Nagvis nagvis nagvis Debian Ubuntu
  • Low 2.3
    CVE-2025-65000

    Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule

    SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the…

    Checkmk Checkmk check-mk Ubuntu

Revision history

  1. #1

    Initiale Fassung

References