Improper Certificate Validation in Checkmk Exchange Plugin for VMware vSAN
CVE-2025-58126

6.9MEDIUM

Key Information:

Status
Vendor
CVE Published:
28 August 2025

What is CVE-2025-58126?

The Checkmk Exchange plugin for VMware vSAN has a vulnerability related to improper certificate validation. Attackers in a Man-in-the-Middle (MitM) position can exploit this weakness to intercept and manipulate network traffic. This flaw raises significant security concerns for organizations using the plugin, as it may lead to unauthorized data access, potential leakage of sensitive information, and disruptions in service continuity. It is crucial for users to stay informed and apply appropriate mitigations.

References

https://exchange.checkmk.com/p/vsan
product

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Felix Eberstaller (Limes Security)
Jakob Hartmann (Limes Security)
.