PT-2025-52229 · Checkmk · Checkmk

Published 2025-12-18 · Updated 2025-12-18 · CVE-2025-65000

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.4.0p19 Checkmk version 2.3.0

Description The SSH private keys for the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source. This exposure potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed.

Recommendations Update Checkmk to version 2.4.0p19 or later. For Checkmk version 2.3.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-212

Related Identifiers

CVE-2025-65000

Affected Products

Checkmk

References · 5

• https://checkmk.com/werk/19030 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-65000 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65000 · Security Note
• https://t.me/CVEtracker/40152 · Telegram Post
• https://twitter.com/CVEnew/status/2001728068524917068 · Twitter Post