Description
Improper certificate validation in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL): the Certificate Authority stores bundled with "certifi" and "webpki-roots" include a root CA that trusts eMudhra (emSign) intermediate certificates whose private keys are public.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Checkmk | Checkmk | 2.5.0 – < 2.5.0p18, 2.4.0 – < 2.4.0p39, 2.3.0 – < 2.3.0p52, 2.2.0 | 2.5.0p18 |
References
- https://checkmk.com/werk/22623 vendor-advisory
- https://checkmk.com/werk/22169 vendor-advisory
- https://github.com/advisories/GHSA-6q48-6c7w-9gw2 third-party-advisory