CVE-2026-111573
2026-11-06
16h17 +00:00
16h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL) allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's plugins or local folders, and to read the agent controller's private key.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Insecure Inherited Permissions A product defines a set of insecure permissions that are inherited by objects that are created by the program. |
