PT-2025-52208 · Checkmk · Checkmk

Published 2025-12-18 · Updated 2025-12-18 · CVE-2025-64997

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.4.0p17 Checkmk versions prior to 2.3.0p42

Description A flaw exists in permission validation within Checkmk. Low-privileged users can access agent information through the REST API, potentially leading to information disclosure. The vulnerable API endpoint allows unauthorized access to sensitive data. The affected parameter is not specified.

Recommendations Update Checkmk to version 2.4.0p17 or later. Update Checkmk to version 2.3.0p42 or later.

Fix

Weakness Enumeration

CWE-280

Related Identifiers

CVE-2025-64997

Affected Products

Checkmk

References · 5

• https://osv.dev/vulnerability/CVE-2025-64997 · Vendor Advisory
• https://checkmk.com/werk/18681 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64997 · Security Note
• https://twitter.com/CVEnew/status/2001728088594616459 · Twitter Post
• https://t.me/CVEtracker/40137 · Telegram Post