Werk #11460: Windows agent service sets correct access rights in ProgramData directory
Komponente | Checks & agents |
Titel | Windows agent service sets correct access rights in ProgramData directory |
Datum | 25.08.2020 |
Checkmk Edition | Checkmk Raw (CRE) |
Checkmk-Version | 1.6.0p17 2.0.0i1 |
Level | Bedeutende Änderung |
Klasse | Sicherheitsfix |
Kompatibilität | Kompatibel - benötigt kein manuelles Eingreifen |
Previously, a standard user can write in ProgramData/checkmk/agent directory, thereby getting a possibility to modify sensitive information.
With this fix the above mentioned vulnerability is eliminated: a standard user has a right to read and execute.
For more information have a look at the advisory page.