7.8

CVE-2025-32919

Medienbericht
Exploit

Privilege Escalation in Windows License plugin for Checkmk Windows Agent

Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation. This issue affects Checkmk: from 2.4.0 before 2.4.0p13, from 2.3.0 before 2.3.0p38, from 2.2.0 before 2.2.0p46, and all versions of 2.1.0 (EOL).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Checkmk ≫ Checkmk Version >= 2.1.0 < 2.2.0
Checkmk ≫ Checkmk Version 2.2.0 Update -
Checkmk ≫ Checkmk Version 2.2.0 Update p1
Checkmk ≫ Checkmk Version 2.2.0 Update p10
Checkmk ≫ Checkmk Version 2.2.0 Update p11
Checkmk ≫ Checkmk Version 2.2.0 Update p12
Checkmk ≫ Checkmk Version 2.2.0 Update p13
Checkmk ≫ Checkmk Version 2.2.0 Update p14
Checkmk ≫ Checkmk Version 2.2.0 Update p16
Checkmk ≫ Checkmk Version 2.2.0 Update p17
Checkmk ≫ Checkmk Version 2.2.0 Update p18
Checkmk ≫ Checkmk Version 2.2.0 Update p19
Checkmk ≫ Checkmk Version 2.2.0 Update p21
Checkmk ≫ Checkmk Version 2.2.0 Update p22
Checkmk ≫ Checkmk Version 2.2.0 Update p23
Checkmk ≫ Checkmk Version 2.2.0 Update p24
Checkmk ≫ Checkmk Version 2.2.0 Update p25
Checkmk ≫ Checkmk Version 2.2.0 Update p26
Checkmk ≫ Checkmk Version 2.2.0 Update p27
Checkmk ≫ Checkmk Version 2.2.0 Update p28
Checkmk ≫ Checkmk Version 2.2.0 Update p29
Checkmk ≫ Checkmk Version 2.2.0 Update p3
Checkmk ≫ Checkmk Version 2.2.0 Update p30
Checkmk ≫ Checkmk Version 2.2.0 Update p31
Checkmk ≫ Checkmk Version 2.2.0 Update p32
Checkmk ≫ Checkmk Version 2.2.0 Update p33
Checkmk ≫ Checkmk Version 2.2.0 Update p34
Checkmk ≫ Checkmk Version 2.2.0 Update p35
Checkmk ≫ Checkmk Version 2.2.0 Update p36
Checkmk ≫ Checkmk Version 2.2.0 Update p37
Checkmk ≫ Checkmk Version 2.2.0 Update p38
Checkmk ≫ Checkmk Version 2.2.0 Update p39
Checkmk ≫ Checkmk Version 2.2.0 Update p4
Checkmk ≫ Checkmk Version 2.2.0 Update p40
Checkmk ≫ Checkmk Version 2.2.0 Update p41
Checkmk ≫ Checkmk Version 2.2.0 Update p42
Checkmk ≫ Checkmk Version 2.2.0 Update p43
Checkmk ≫ Checkmk Version 2.2.0 Update p44
Checkmk ≫ Checkmk Version 2.2.0 Update p45
Checkmk ≫ Checkmk Version 2.2.0 Update p5
Checkmk ≫ Checkmk Version 2.2.0 Update p6
Checkmk ≫ Checkmk Version 2.2.0 Update p7
Checkmk ≫ Checkmk Version 2.2.0 Update p8
Checkmk ≫ Checkmk Version 2.2.0 Update p9
Checkmk ≫ Checkmk Version 2.3.0 Update -
Checkmk ≫ Checkmk Version 2.3.0 Update p1
Checkmk ≫ Checkmk Version 2.3.0 Update p10
Checkmk ≫ Checkmk Version 2.3.0 Update p11
Checkmk ≫ Checkmk Version 2.3.0 Update p12
Checkmk ≫ Checkmk Version 2.3.0 Update p13
Checkmk ≫ Checkmk Version 2.3.0 Update p14
Checkmk ≫ Checkmk Version 2.3.0 Update p15
Checkmk ≫ Checkmk Version 2.3.0 Update p16
Checkmk ≫ Checkmk Version 2.3.0 Update p17
Checkmk ≫ Checkmk Version 2.3.0 Update p18
Checkmk ≫ Checkmk Version 2.3.0 Update p19
Checkmk ≫ Checkmk Version 2.3.0 Update p2
Checkmk ≫ Checkmk Version 2.3.0 Update p20
Checkmk ≫ Checkmk Version 2.3.0 Update p21
Checkmk ≫ Checkmk Version 2.3.0 Update p22
Checkmk ≫ Checkmk Version 2.3.0 Update p23
Checkmk ≫ Checkmk Version 2.3.0 Update p24
Checkmk ≫ Checkmk Version 2.3.0 Update p25
Checkmk ≫ Checkmk Version 2.3.0 Update p26
Checkmk ≫ Checkmk Version 2.3.0 Update p27
Checkmk ≫ Checkmk Version 2.3.0 Update p28
Checkmk ≫ Checkmk Version 2.3.0 Update p29
Checkmk ≫ Checkmk Version 2.3.0 Update p3
Checkmk ≫ Checkmk Version 2.3.0 Update p30
Checkmk ≫ Checkmk Version 2.3.0 Update p31
Checkmk ≫ Checkmk Version 2.3.0 Update p32
Checkmk ≫ Checkmk Version 2.3.0 Update p33
Checkmk ≫ Checkmk Version 2.3.0 Update p34
Checkmk ≫ Checkmk Version 2.3.0 Update p35
Checkmk ≫ Checkmk Version 2.3.0 Update p36
Checkmk ≫ Checkmk Version 2.3.0 Update p37
Checkmk ≫ Checkmk Version 2.3.0 Update p4
Checkmk ≫ Checkmk Version 2.3.0 Update p5
Checkmk ≫ Checkmk Version 2.3.0 Update p6
Checkmk ≫ Checkmk Version 2.3.0 Update p7
Checkmk ≫ Checkmk Version 2.3.0 Update p8
Checkmk ≫ Checkmk Version 2.3.0 Update p9
Checkmk ≫ Checkmk Version 2.4.0 Update -
Checkmk ≫ Checkmk Version 2.4.0 Update p1
Checkmk ≫ Checkmk Version 2.4.0 Update p10
Checkmk ≫ Checkmk Version 2.4.0 Update p11
Checkmk ≫ Checkmk Version 2.4.0 Update p12
Checkmk ≫ Checkmk Version 2.4.0 Update p2
Checkmk ≫ Checkmk Version 2.4.0 Update p3
Checkmk ≫ Checkmk Version 2.4.0 Update p4
Checkmk ≫ Checkmk Version 2.4.0 Update p5
Checkmk ≫ Checkmk Version 2.4.0 Update p6
Checkmk ≫ Checkmk Version 2.4.0 Update p7
Checkmk ≫ Checkmk Version 2.4.0 Update p8
Checkmk ≫ Checkmk Version 2.4.0 Update p9
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.161
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
security@checkmk.com 8.8 0 0
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
13.10.2025 15:12
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
10.10.2025 10:57
https://checkmk.com/werk/18207
Vendor Advisory
https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20250724-01_Checkmk_Agent_Privilege_Escalation_via_Insecure_Temporary_Files
Third Party Advisory
Exploit
http://seclists.org/fulldisclosure/2025/Oct/6
Third Party Advisory
Exploit
Mailing List