CVE-2025-58122: Insufficient permission validation when configuring notification parameters
Insufficient permission validation in Checkmk 2.4.0 before version 2.4.0p16 allows low-privileged users to modify notification parameters via the REST API, which could lead to unauthorized actions or information disclosure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Checkmkto a version that resolves this vulnerability.Fixed in 2.4.0p16
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58122?
CVE-2025-58122 is considered a medium severity vulnerability due to its potential for unauthorized actions by low-privileged users.
How do I fix CVE-2025-58122?
To fix CVE-2025-58122, upgrade Checkmk to version 2.4.0p16 or later.
Who is affected by CVE-2025-58122?
CVE-2025-58122 affects users of Checkmk versions prior to 2.4.0p16.
What can happen if CVE-2025-58122 is exploited?
Exploitation of CVE-2025-58122 may allow low-privileged users to modify notification parameters, leading to unauthorized actions or information disclosure.
Is CVE-2025-58122 related to any APIs?
Yes, CVE-2025-58122 involves insufficient permission validation in the REST API of Checkmk.