Threats tagged 'ghsa-3cg9-rmv8-63rq'

Checkmk versions prior to 2.5.0p16 have a vulnerability where the Jolokia special agent is invoked with the login password visible in the command line. This allows a local user on the Checkmk server to read the Jolokia login password from the process list while the agent is running. Both explicitly configured passwords and those retrieved from the password store are affected.