CVE 2.3 LOW

Exposure of SSH Private Keys in Remote Alert Handlers (Linux) Rule_CVE-2025-65000

2.3 / 10
LOW
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:L

Description

SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed.

Basic Information

ID CVE-2025-65000
Source Checkmk
Published Dec 18, 2025 at 14:04

Affected Product

Vendor Checkmk GmbH
Product Checkmk
Version 2.4.0
Affected Versions Checkmk GmbH Checkmk 2.4.0
Checkmk GmbH Checkmk 2.3.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.