icinga2-2.14.6-1.1 on GA media (moderate)

icinga2-2.14.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:15180-1 Rating: moderate Cross-References: CVE-2025-48057 CVSS scores: CVE-2025-48057 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-48057 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L...

CVE-2025-48057

Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate function can be tricked into incorrectly treating certificates as vali...

Icinga < 2.12.12, 2.13.0 < 2.13.12, 2.14.0 < 2.14.6 Certificate Validation Vulnerability

Icinga 2 is prone to a TLS server certificate validation vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-48057

Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate function can be tricked into incorrectly treating certificates as vali...

CVE-2025-48057

Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate function can be tricked into incorrectly treating certificates as vali...

CVE-2025-48057

creationtimestamp| type| source ---|---|--- 2025-05-27 16:52:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17664 2025-05-27 17:00:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq65vfj6ty22 2025-05-27...

CVE-2025-48057 Icinga 2 certificate renewal might incorrectly renew an invalid certificate

Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate function can be tricked into incorrectly treating certificates as vali...

CVE-2025-48057

The CVE-2025-48057 issue affects Icinga 2: when built with OpenSSL older than 1.1.0, the VerifyCertificate() function can incorrectly treat a certificate as valid, enabling an attacker to cause a malicious certificate request to be treated as a renewal of an existing certificate and impersonate t...