CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-47092: Insecure deserialization and improper certificate validation in Checkmk Exchange plugin check-mk-api
7.7
CVSS
Description
Insecure deserialization and improper certificate validation in Checkmk Exchange plugin check-mk-api prior to 5.8.1
Classification
CVE ID: CVE-2024-47092
CVSS Base Severity: HIGH
CVSS Base Score: 7.7
CVSS Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Problem Types
CWE-502: Deserialization of Untrusted DataAffected Products
Vendor:
Product:
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 7.04% (scored less or equal to compared to others)
EPSS Date: 2025-04-01 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2024-47092https://exchange.checkmk.com/p/check-mk-api
https://github.com/HeinleinSupport/check_mk_extensions/commit/b5a2a7529e3367d7a643e66f05da4f2a27013904