PT-2025-9325 · Checkmk · Check-Mk-Api

Felix Eberstaller + 1 · Publicado 2025-03-03 · Atualizado 2025-03-03 · CVE-2024-47092

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Checkmk Exchange plugin check-mk-api versions prior to 5.8.1

Description The issue involves insecure deserialization and improper certificate validation.

Recommendations For versions prior to 5.8.1, update to version 5.8.1 or later to resolve the issue.

Correção

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2024-47092

Produtos afetados

Check-Mk-Api

Referências · 5

• https://github.com/HeinleinSupport/check_mk_extensions/commit/b5a2a7529e3367d7a643e66f05da4f2a27013904 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2024-47092 · Nota de Segurança
• https://exchange.checkmk.com/p/check-mk-api · Nota
• https://t.me/cvenotify/113103 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2024-47092 · Aviso do Fabricante