Werk #11460: Windows agent service sets correct access rights in ProgramData directory

Component	Checks & Agents
Title	Windows agent service sets correct access rights in ProgramData directory
Date	Aug 25, 2020
Checkmk Editon	Checkmk Raw (CRE)
Checkmk Version	2.0.0i1 1.6.0p17
Level	Prominent Change
Class	Security Fix
Compatibility	Compatible - no manual interaction needed

Previously, a standard user can write in ProgramData/checkmk/agent directory, thereby getting a possibility to modify sensitive information.

With this fix the above mentioned vulnerability is eliminated: a standard user has a right to read and execute.

For more information have a look at the advisory page.

To the list of all Werks