Checkmk Agent Updater Permission Vulnerability on Linux and Solaris

A vulnerability exists in Checkmk's automatic agent updates on Linux and Solaris platforms, affecting versions prior to 2.4.0p1, 2.3.0p32, 2.2.0p42, and 2.1.0p49 (EOL). The issue arises from packages being downloaded with overly permissive rights, which could allow a local attacker to access sensitive data. This vulnerability impacts users who have enabled 'Automatic Agent Updates' for Linux and Solaris hosts.

Impact

The vulnerability could lead to unauthorized access to sensitive data in the configuration, allowing other users on the host to read this information.

Remediation

Users can update to Checkmk versions 2.4.0p1, 2.3.0p32, 2.2.0p42, or a future release of 2.5.0b1. If an update is not feasible, consider disabling 'Automatic Agent Updates' on affected hosts.