Werk #14871: Windows agent's ProgramData directory is accessible only with admins permissions

Component Checks & agents
Title Windows agent's ProgramData directory is accessible only with admins permissions
Date Oct 6, 2022
Checkmk Editon Checkmk Raw (CRE)
Checkmk Version 2.2.0i1 2.1.0p15
Level Prominent Change
Class Security Fix
Compatibility Compatible - no manual interaction needed

Previous to this Werk every authenticated Windows user could read some sensitive data from the Windows agent working directory. To prevent issues with leaking sensitive data we restrict the permission to read data of the Windows agent.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

To the list of all Werks