low2.3
CVE-2026-7485
Incorrect authorization in frozen BI aggregations in Checkmk <2.5.0p2, <2.4.0p29, <2.3.0p47, and all 2.2.0 versions allows an authenticated user with restricte…
Impact
Incorrect authorization in frozen BI aggregations in Checkmk <2.5.0p2, <2.4.0p29, <2.3.0p47, and all 2.2.0 versions allows an authenticated user with restricted host and service visibility to learn the names and the existence of hosts and services they are not authorized to see.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Checkmk | Checkmk | before 2.5.0p2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.