Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2025/11/18 3:10 p.m.•25 views

CVE-2025-64996 Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output

In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mkinotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially leading to unauthorized access to or modification ...

4.8CVSS0.00101EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/18 3:10 p.m.•5 views

CVE-2025-64996 Overly broad file permissions in the mk_inotify plugin allows reading and manipulating the plugin's output

In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mkinotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially leading to unauthorized access to or modification ...

4.8CVSS5.8AI score0.00101EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/18 12:00 a.m.•3 views

CVE-2025-64996: Incorrect Permission Assignment for Critical Resource

In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mkinotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially leading to unauthorized access to or modification ...

4.8CVSS5.7AI score0.00101EPSS
SaveExploits0References1
Rows per page
Query Builder