6.9
CVE-2025-58127
- EPSS 0.1%
- Veröffentlicht 28.08.2025 13:16:10
- Zuletzt bearbeitet 23.09.2025 15:41:45
- Quelle security@checkmk.com
- CVE-Watchlists
- Unerledigt
Lack of TLS validation in plugin Dell Powerscale on Checkmk Exchange
Improper Certificate Validation in Checkmk Exchange plugin Dell Powerscale allows attackers in MitM position to intercept traffic.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tomtretbar ≫ Dell Powerscale Version- SwPlatformcheckmk
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.1% | 0.011 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.8 | 2.2 | 2.5 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
|
| security@checkmk.com | 6.9 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
CWE-295 Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
https://exchange.checkmk.com/p/powerscale