Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-58124 EUVD-2025-25967GHSA-mj3w-6w57-pmww

Lack of TLS validation in plugin check-mk-api on Checkmk Exchange

Published Aug 28, 2025 · Updated Oct 7, 2025 · Assigned by Checkmk

Description

Improper Certificate Validation in Checkmk Exchange plugin check-mk-api allows attackers in MitM position to intercept traffic.

Affected products

VendorProductAffectedFixed
— check-mk-api 2.2 – < 6.1.1 6.1.1

References