Unrated

Potentially senitive path exposed via unauthenticated http route

CVE-2025-3506 First seen on SecPulse May 8, 2025

Original description The description as published by the source.

Files to be deployed with agents are accessible without authentication in Checkmk 2.1.0, Checkmk 2.2.0, Checkmk 2.3.0 and <Checkmk 2.4.0b6 allows attacker to access files that could contain secrets.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web checkmk.com

Key facts

Severity: Unrated
Published: May 8, 2025
First seen on SecPulse: May 8, 2025
CWE: CWE-497

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:08