CVE-2025-2596 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	UNKNOWN				---
Checkmk	CNA	---				---
CISA-ADP	ADP	---				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 12%

Ubuntu Releases

Ubuntu Product

Codename

check-mk

plucky	dne
oracular	dne
noble	dne
jammy	dne
focal	dne
bionic	needs-triage
xenial	needs-triage

Common Weakness Enumeration

CWE-613 - Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References

https://checkmk.com/werk/17808