CVE-2024-38861 — Lack of TLS validation in plugin MikroTik on Checkmk Exchange

CVE-2024-38861

Lack of TLS validation in plugin MikroTik on Checkmk Exchange PUBLISHED

Description (CNA)

Improper Certificate Validation in Checkmk Exchange plugin MikroTik allows attackers in MitM position to intercept traffic. This issue affects MikroTik: from 2.0.0 through 2.5.5, from 0.4a_mk through 2.0a.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 2.0.0 through 2.5.5; affected 0.4a_mk through 2.0a

CWE

CWE-295

References

https://exchange.checkmk.com/p/mikrotik

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.