Werk #11460: Windows agent service sets correct access rights in ProgramData directory

Komponente Checks & agents
Titel Windows agent service sets correct access rights in ProgramData directory
Datum 25.08.2020
Checkmk Edition Checkmk Raw (CRE)
Checkmk-Version 1.6.0p17 2.0.0i1
Level Bedeutende Änderung
Klasse Sicherheitsfix
Kompatibilität Kompatibel - benötigt kein manuelles Eingreifen

Previously, a standard user can write in ProgramData/checkmk/agent directory, thereby getting a possibility to modify sensitive information.

With this fix the above mentioned vulnerability is eliminated: a standard user has a right to read and execute.

For more information have a look at the advisory page.

Zur Liste aller Werks