CVE-2025-3506 — Potentially senitive path exposed via unauthenticated http route
Files to be deployed with agents are accessible without authentication in Checkmk 2.1.0, Checkmk 2.2.0, Checkmk 2.3.0 and <Checkmk 2.4.0b6 allows attacker to access files that c…
Published: 2025-05-08 · CVSS: 6.3 · CVSS 4.0
Files to be deployed with agents are accessible without authentication in Checkmk 2.1.0, Checkmk 2.2.0, Checkmk 2.3.0 and <Checkmk 2.4.0b6 allows attacker to access files that could contain secrets.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7