Improper Certificate Validation in Checkmk Exchange Plugin by Checkmk
CVE-2025-58124

6.9MEDIUM

Key Information:

Status
Vendor
CVE Published:
28 August 2025

What is CVE-2025-58124?

The Checkmk Exchange plugin check-mk-api is susceptible to improper certificate validation, which may allow attackers to perform Man-in-the-Middle (MitM) attacks. This vulnerability can enable malicious actors to intercept and manipulate sensitive data transmitted between the client and server, posing significant risks to data integrity and confidentiality.

References

https://exchange.checkmk.com/p/check-mk-api
product

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Felix Eberstaller (Limes Security)
Jakob Hartmann (Limes Security)
.
CVE-2025-58124 : Improper Certificate Validation in Checkmk Exchange Plugin by Checkmk