PT-2025-20377 · Checkmk · Checkmk

Norman Kühnberger · Published 2025-05-08 · Updated 2025-05-08 · CVE-2025-3506

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Medium

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Checkmk versions 2.1.0 through 2.3.0 Checkmk version 2.4.0b6 and earlier

Description The issue allows files to be deployed with agents to be accessible without authentication. This could enable an attacker to access files that may contain secrets.

Recommendations For Checkmk versions 2.1.0 through 2.3.0, update to a version later than 2.3.0 to resolve the issue. For Checkmk version 2.4.0b6 and earlier, update to a version later than 2.4.0b6 to resolve the issue. As a temporary workaround, consider restricting access to sensitive files until a patch is available.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2025-3506

Affected Products

Checkmk

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-3506 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-3506 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-3506 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-3506 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-3506 · Vendor Advisory
• https://checkmk.com/werk/17348 · Vendor Advisory
• https://t.me/cvedetector/24823 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1920487767907107085 · Twitter Post
• https://t.me/cvetracker/23351 · Telegram Post
• https://twitter.com/CVEnew/status/1920446163611992161 · Twitter Post