Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output

In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mk_inotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially leading to unauthorized access to or modification of monitoring data.

N/A

关键资源的不正确权限授予

Checkmk 安全漏洞

Checkmk是Checkmk公司的一个 IT 监控平台。 Checkmk 2.4.0p16之前版本、2.3.0p41之前版本和2.2.0及之前所有版本存在安全漏洞，该漏洞源于mk_inotify插件创建全局可读写文件，可能导致未经授权的访问或修改监控数据。

N/A

N/A