CVE-2025-39665
Livestatus Injection in dynmaps
Summary
Livestatus Injection in dynmaps
Original description
The description as published by the source.
User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-39665 nagvis
- Ubuntu UBUNTU-CVE-2025-39665 nagvis
References
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web nagvis.org