CVE-2025-2596CWE-613

Session logout can be overwritten by long lasting request

Low · published March 26, 2025

CVSS v4.0
2.3
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

Session logout could be overwritten in Checkmk GmbH's Checkmk versions <2.3.0p30, <2.2.0p41, and 2.1.0p49 (EOL)

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00211 · 10.8th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2025-03-26T10:51Z
EPSS history
Timeline
  • 26 MAR 10:51Z
    Session logout can be overwritten by long lasting request
    cvelistv5