CVE-2025-32917
No fix known EPSS <1%CVSS 5.2
Privilege escalation in jar_signature agent plugin in Checkmk versions <2.4.0b7 (beta), <2.3.0p32, <2.2.0p42, and 2.1.0p49 (EOL) allow user with write access to JAVA_HOME/bin directory to escalate privileges.
Products: Checkmk GmbH Checkmk
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu:18.04:LTS | check-mk | no fix |
| Ubuntu:Pro:16.04:LTS | check-mk | no fix |