CVE-2025-48057

Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate function can be tricked into incorrectly treating certificates as vali...

CVE-2025-48057

The CVE-2025-48057 issue affects Icinga 2: when built with OpenSSL older than 1.1.0, the VerifyCertificate() function can incorrectly treat a certificate as valid, enabling an attacker to cause a malicious certificate request to be treated as a renewal of an existing certificate and impersonate t...

CVE-2025-48057 Icinga 2 certificate renewal might incorrectly renew an invalid certificate

Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate function can be tricked into incorrectly treating certificates as vali...

Icinga 安全漏洞

Icinga is a scalable server, network resource monitoring system from Icinga, Germany. A security vulnerability exists in Icinga 2 versions prior to 2.12.12, prior to 2.13.12, and prior to 2.14.6, which stems from the VerifyCertificate function that may incorrectly validate a certificate...