Werk #11460: Windows agent service sets correct access rights in ProgramData directory

Component Checks & Agents
Title Windows agent service sets correct access rights in ProgramData directory
Date Aug 25, 2020
Checkmk Editon Checkmk Raw (CRE)
Checkmk Version 2.0.0i1 1.6.0p17
Level Prominent Change
Class Security Fix
Compatibility Compatible - no manual interaction needed

Previously, a standard user can write in ProgramData/checkmk/agent directory, thereby getting a possibility to modify sensitive information.

With this fix the above mentioned vulnerability is eliminated: a standard user has a right to read and execute.

For more information have a look at the advisory page.

To the list of all Werks