CVE-2024-47092 Insecure deserialization and improper certificate validation in Checkmk Exchange plugin check-mk-api

Insecure deserialization and improper certificate validation in Checkmk Exchange plugin check-mk-api prior to 5.8.1...

CVE-2024-47092

CVE-2024-47092 affects the Checkmk Exchange plugin check-mk-api prior to 5.8.1. The underlying issue is insecure deserialization and improper certificate validation in the plugin, with CVSS v3.1 base score 9.8 (CRITICAL) and CVSS4 base score 7.7 (HIGH). Attack vector is NETWORK with no user inter...

Checkmk Exchange plugin check-mk-api 代码问题漏洞

Checkmk Exchange plugin check-mk-api is a plugin from Checkmk, Inc. A security vulnerability exists in Checkmk Exchange plugin check-mk-api versions prior to 5.8.1 that stems from insecure deserialization and improper certificate validation...

The vulnerability of the Checkmk Exchange plugin for MikroTik routers allows a hacker to execute a spoofing attack.

The vulnerability of the Checkmk Exchange plugin for MikroTik routers is related to errors in the authentication process. Exploiting this vulnerability allows a malicious actor to execute a spoofing attack remotely...

CVE-2024-38861

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4amk through 2.0a...

CVE-2024-38861

The CVE-2024-38861 entry covers an improper certificate validation issue in the Checkmk Exchange MikroTik plugin, enabling potential MitM interception. Affected MikroTik versions are 0.4a_mk–2.0a and 2.0.0–2.5.5. The vulnerability arises from TLS/certificate validation weaknesses in the plugin, n...

CVE-2024-38861 Lack of TLS validation in plugin MikroTik on Checkmk Exchange

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4amk through 2.0a...

CVE-2024-38861 Lack of TLS validation in plugin MikroTik on Checkmk Exchange

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4amk through 2.0a...

Checkmk Exchange plugin MikroTik 安全漏洞

Checkmk Exchange plugin MikroTik is a plugin from Checkmk Inc. A security vulnerability exists in Checkmk Exchange plugin MikroTik versions 2.0.0 through 2.5.5 and 0.4amk through 2.0a, which originates from improper certificate validation and allows an attacker in the position of MitM to intercep...

PT-2019-6462 · Mikrotik +1 · Mikrotik +1

Name of the Vulnerable Software and Affected Versions: MikroTik versions 0.4a mk through 2.0a MikroTik versions 2.0.0 through 2.5.5 Description: The issue is related to improper certificate validation in the Checkmk Exchange plugin for MikroTik routers, which can allow an attacker to intercept...