Security Advisory

CVE-2025-65000

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-18 14:04:12
Last updated 2025-12-18 15:28:51
Assigner Checkmk
State PUBLISHED

Description

SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule pages HTML source in Checkmk <= 2.4.0p18 and all versions of Checkmk 2.3.0. This potentially allowed unauthorized triggering of predefined alert handlers on hosts where the handler was deployed.