Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation. This issue affects Checkmk: from 2.4.0 before 2.4.0p13, from 2.3.0 before 2.3.0p38, from 2.2.0 before 2.2.0p46, and all versions of 2.1.0 (EOL).
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://checkmk.com/werk/18207 |
|
History
Thu, 09 Oct 2025 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation. This issue affects Checkmk: from 2.4.0 before 2.4.0p13, from 2.3.0 before 2.3.0p38, from 2.2.0 before 2.2.0p46, and all versions of 2.1.0 (EOL). | |
| Title | Privilege Escalation in Windows License plugin for Checkmk Windows Agent | |
| Weaknesses | CWE-427 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: Checkmk
Published:
Updated: 2025-10-09T15:01:42.606Z
Reserved: 2025-04-14T09:52:19.273Z
Link: CVE-2025-32919
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2025-10-09T15:16:06.057
Modified: 2025-10-09T15:50:04.013
Link: CVE-2025-32919
Redhat
No data.
OpenCVE Enrichment
No data.