CVE-2025-58123 Lack of TLS validation in plugin BGP Monitoring on Checkmk Exchange

Improper Certificate Validation in Checkmk Exchange plugin BGP Monitoring allows attackers in MitM position to intercept traffic...

CVE-2025-58123

CVE-2025-58123 affects the Checkmk Exchange plugin BGP Monitoring. The root cause is improper certificate validation, enabling MitM attackers to intercept traffic when positioned on the network. Documented sources confirm the vulnerability description but do not provide explicit affected versions...

Checkmk Exchange plugin BGP Monitoring 安全漏洞

Checkmk Exchange plugin BGP Monitoring is a session visualization management and service state monitoring software from Checkmk, Germany. A security vulnerability exists in Checkmk Exchange plugin BGP Monitoring that stems from improper certificate validation and could lead to a man-in-the-middle...

PT-2025-35082

Name of the Vulnerable Software and Affected Versions: Checkmk Exchange plugin VMware vSAN affected versions not specified Description: The Checkmk Exchange plugin for VMware vSAN contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle MitM positi...

PT-2025-35081

Name of the Vulnerable Software and Affected Versions: Checkmk Exchange plugin Freebox v6 agent affected versions not specified Description: The Checkmk Exchange plugin Freebox v6 agent contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle MitM...

PT-2025-35083

Name of the Vulnerable Software and Affected Versions: Checkmk Exchange plugin Dell Powerscale affected versions not specified Description: The Checkmk Exchange plugin for Dell Powerscale contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle Mit...

Checkmk Exchange plugin Freebox v6 agent 安全漏洞

Checkmk Exchange plugin Freebox v6 agent is a plugin for device status monitoring from Checkmk Germany. A security vulnerability exists in Checkmk Exchange plugin Freebox v6 agent that stems from improper certificate validation and could lead to a man-in-the-middle attacker intercepting traffic...

PT-2025-35079

Name of the Vulnerable Software and Affected Versions: Checkmk Exchange plugin versions affected versions not specified Description: Improper certificate validation in the Checkmk Exchange plugin’s BGP monitoring functionality allows attackers positioned in a man-in-the-middle MitM position to...

Checkmk Exchange plugin check-mk-api 安全漏洞

Checkmk Exchange plugin check-mk-api is a plugin from Checkmk, Inc. A security vulnerability exists in Checkmk Exchange plugin check-mk-api, which stems from improper certificate validation and could lead to a man-in-the-middle attacker intercepting traffic...

Checkmk Exchange plugin Dell Powerscale 安全漏洞

Checkmk Exchange plugin Dell Powerscale is a plugin for device status monitoring from Checkmk Germany. A security vulnerability exists in Checkmk Exchange plugin Dell Powerscale that stems from improper certificate validation, which could lead to a man-in-the-middle attacker intercepting traffic...

PT-2025-35080

Name of the Vulnerable Software and Affected Versions: Checkmk versions affected versions not specified Description: The Checkmk Exchange plugin check-mk-api contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle MitM position to intercept networ...

Linux Distros Unpatched Vulnerability : CVE-2023-48052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

Linux Distros Unpatched Vulnerability : CVE-2024-47619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - syslog-ng is an enhanced log daemo. Prior to version 4.8.2, tlswildcardmatch matches on certificates such as foo..bar although that is not allowed. It is also...

Linux Distros Unpatched Vulnerability : CVE-2021-22189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that...

Linux Distros Unpatched Vulnerability : CVE-2022-41916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heimdal is an implementation of ASN.1/DER, PKIX, and Kerberos. Versions prior to 7.7.1 are vulnerable to a denial of service vulnerability in Heimdal's PKI...

Linux Distros Unpatched Vulnerability : CVE-2019-3685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary CVE-2019-3685 Note that Nessus reli...

The vulnerability of the application software interface of the Cisco Catalyst SD-WAN Manager allows a intruder to gain unauthorized access to protected information.

The vulnerability of the application software interface of the Cisco Catalyst SD-WAN Manager is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2020-7041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509checkhost negati...

SUSE SLES12: libqt4 / libqt4-32bit / libqt4-devel / libqt4-devel-doc / etc (SUSE-SU-2025:02968-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02968-1 advisory. - CVE-2021-45930: Fixed out-of-bounds write leading to DoS bsc1196654 - CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont...

Linux Distros Unpatched Vulnerability : CVE-2021-22895

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when using the Register with ...