CVE-2025-32917 MEDIUM

CVE-2025-32917: Privilege escalation in jar_signature

Vendor Checkmk Gmbh
Product Checkmk
Weakness CWE-427
Published May 13, 2025
Last update May 13, 2025
View on NVD All CVEs

CVSS base score

5.2/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H

What the vulnerability does

01Description

Privilege escalation in jar_signature agent plugin in Checkmk versions <2.4.0b7 (beta), <2.3.0p32, <2.2.0p42, and 2.1.0p49 (EOL) allow user with write access to JAVA_HOME/bin directory to escalate privileges.

Key dates

02Disclosure timeline

May 13, 2025 CVE published
May 13, 2025 Record updated