Werk #11460: Windows agent service sets correct access rights in ProgramData directory
|Component||Checks & Agents|
|Title||Windows agent service sets correct access rights in ProgramData directory|
|Date||Aug 25, 2020|
|Checkmk Editon||Checkmk Raw (CRE)|
|Checkmk Version||2.0.0i1 1.6.0p17|
|Compatibility||Compatible - no manual interaction needed|
Previously, a standard user can write in ProgramData/checkmk/agent directory, thereby getting a possibility to modify sensitive information.
With this fix the above mentioned vulnerability is eliminated: a standard user has a right to read and execute.
For more information have a look at the advisory page.To the list of all Werks