Skip to content
OpenAdvisories
Medium WID-SEC-2026-4035 2 CVEs

Checkmk: Mehrere Schwachstellen

Published Oct 19, 2026 · Updated Nov 5, 2026 · Revision 2 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um Informationen offenzulegen, und um Dateien zu manipulieren.

Product

Checkmk ist eine IT-Monitoring-Software.

Vulnerabilities 2

  • Low 2.0

    NetApp ONTAP special agent exposes password in process list

    Invocation of the NetApp ONTAP special agent with the login password in the command line in Checkmk version 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the NetApp login password from the process list while the special agent is runn…

  • Low 2.0

    Jolokia special agent exposes password in process list

    Invocation of the Jolokia special agent with the login password in the command line in Checkmk versions 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the Jolokia login password from the process list while the special agent is running…

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-118027

  2. #1

    Initiale Fassung

References