Werk #11460: Windows agent service sets correct access rights in ProgramData directory
Component | Checks & agents |
Title | Windows agent service sets correct access rights in ProgramData directory |
Date | Aug 25, 2020 |
Checkmk Edition | Checkmk Raw (CRE) |
Checkmk Version | 1.6.0p17 2.0.0i1 |
Level | Prominent Change |
Class | Security Fix |
Compatibility | Compatible - no manual interaction needed |
Previously, a standard user can write in ProgramData/checkmk/agent directory, thereby getting a possibility to modify sensitive information.
With this fix the above mentioned vulnerability is eliminated: a standard user has a right to read and execute.
For more information have a look at the advisory page.