Threats tagged 'ghsa-q2v4-c5p2-6gr4'

Checkmk versions prior to 2.5.0p18, 2.4.0p39, 2.3.0p52, and version 2.2.0 (EOL) have improper certificate validation due to inclusion of a root CA that trusts eMudhra (emSign) intermediate certificates with publicly known private keys. This flaw arises from the bundled Certificate Authority stores using "certifi" and "webpki-roots". The vulnerability could allow attackers to exploit the trust in these compromised intermediate certificates.