Werk #11460: Windows agent service sets correct access rights in ProgramData directory
Component | Checks & Agents |
Title | Windows agent service sets correct access rights in ProgramData directory |
Date | Aug 25, 2020 |
Checkmk Editon | Checkmk Raw (CRE) |
Checkmk Version | 2.0.0i1 1.6.0p17 |
Level | Prominent Change |
Class | Security Fix |
Compatibility | Compatible - no manual interaction needed |
Previously, a standard user can write in ProgramData/checkmk/agent directory, thereby getting a possibility to modify sensitive information.
With this fix the above mentioned vulnerability is eliminated: a standard user has a right to read and execute.
For more information have a look at the advisory page.
To the list of all Werks