CVE-2025-58122

Insufficient permission validation when configuring notification parameters PUBLISHED

Description (CNA)

Insufficient permission validation in Checkmk 2.4.0 before version 2.4.0p16 allows low-privileged users to modify notification parameters via the REST API, which could lead to unauthorized actions or information disclosure.

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.4.0 before 2.4.0p16

CWE

CWE-280

References

https://checkmk.com/werk/18982

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.