CVE-2025-58124
BaseFortify
Publication date: 2025-08-28
Last updated on: 2025-09-23
Assigner: Checkmk GmbH
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| heinlein-support | check_mk_python_api | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-295 | The product does not validate, or incorrectly validates, a certificate. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an improper certificate validation issue in the Checkmk Exchange plugin check-mk-api. It allows attackers who are in a Man-in-the-Middle (MitM) position to intercept the traffic between the client and server, potentially compromising the confidentiality and integrity of the data transmitted.
How can this vulnerability impact me? :
The vulnerability can allow attackers positioned between the client and server to intercept and possibly manipulate the data being transmitted. This could lead to exposure of sensitive information or unauthorized actions being performed through the intercepted communication.