5.4

CVE-2025-58121

Insufficient permission validation on multiple REST API endpoints

Insufficient permission validation on multiple REST API endpoints in Checkmk 2.2.0, 2.3.0, and 2.4.0 before version 2.4.0p16 allows low-privileged users to perform unauthorized actions or obtain sensitive information
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Checkmk ≫ Checkmk Version >= 2.2.0 < 2.4.0
Checkmk ≫ Checkmk Version 2.4.0 Update -
Checkmk ≫ Checkmk Version 2.4.0 Update b1
Checkmk ≫ Checkmk Version 2.4.0 Update b2
Checkmk ≫ Checkmk Version 2.4.0 Update b3
Checkmk ≫ Checkmk Version 2.4.0 Update b4
Checkmk ≫ Checkmk Version 2.4.0 Update b5
Checkmk ≫ Checkmk Version 2.4.0 Update b6
Checkmk ≫ Checkmk Version 2.4.0 Update p1
Checkmk ≫ Checkmk Version 2.4.0 Update p10
Checkmk ≫ Checkmk Version 2.4.0 Update p11
Checkmk ≫ Checkmk Version 2.4.0 Update p12
Checkmk ≫ Checkmk Version 2.4.0 Update p13
Checkmk ≫ Checkmk Version 2.4.0 Update p14
Checkmk ≫ Checkmk Version 2.4.0 Update p15
Checkmk ≫ Checkmk Version 2.4.0 Update p2
Checkmk ≫ Checkmk Version 2.4.0 Update p3
Checkmk ≫ Checkmk Version 2.4.0 Update p4
Checkmk ≫ Checkmk Version 2.4.0 Update p5
Checkmk ≫ Checkmk Version 2.4.0 Update p6
Checkmk ≫ Checkmk Version 2.4.0 Update p7
Checkmk ≫ Checkmk Version 2.4.0 Update p8
Checkmk ≫ Checkmk Version 2.4.0 Update p9
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.1
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.4 2.8 2.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
security@checkmk.com 5.3 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-280 Improper Handling of Insufficient Permissions or Privileges

The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.

https://checkmk.com/werk/18983
Vendor Advisory