Werk #11460: Windows agent service sets correct access rights in ProgramData directory

Komponente Checks und Agenten
Titel Windows agent service sets correct access rights in ProgramData directory
Datum 25.08.2020
Checkmk-Editon Checkmk Raw (CRE)
Checkmk-Version 2.0.0i1 1.6.0p17
Level Bedeutende Änderung
Klasse Sicherheitsfix
Kompatibilität Kompatibel - benötigt kein manuelles Eingreifen

Previously, a standard user can write in ProgramData/checkmk/agent directory, thereby getting a possibility to modify sensitive information.

With this fix the above mentioned vulnerability is eliminated: a standard user has a right to read and execute.

For more information have a look at the advisory page.

Zur Liste aller Werks