CVE-2025-58122 in Checkmk

Resumen

por MITRE • 2025-11-18

Insufficient permission validation in Checkmk 2.4.0 before version 2.4.0p16 allows low-privileged users to modify notification parameters via the REST API, which could lead to unauthorized actions or information disclosure.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsable: Checkmk
• Reservar: 2025-08-25
• Divulgación: 2025-11-18
• Moderación: aceptado
• Artículo: VDB-332808
• CPE: listo
• CWE: CWE-280 (confirmado)
• CVSS: 5.4 (NVD)
• EPSS: 0.00160
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-58122
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-58122
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-58122/