CVE-2026-3103 | THREATINT

Description

A logic error in the remove_password() function in Checkmk GmbH's Checkmk versions <2.4.0p23, <2.3.0p43, and 2.2.0 (EOL) allows a low-privileged user to cause data loss.

PUBLISHED Reserved 2026-02-24 | Published 2026-03-04 | Updated 2026-03-04 | Assigner Checkmk

MEDIUM: 5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Problem types

CWE-863: Incorrect Authorization

Product status

Default status

unaffected

2.4.0 (semver) before 2.4.0p23

affected

2.3.0 (semver) before 2.3.0p43

affected

2.2.0 (semver)

affected

References

checkmk.com/werk/19041

cve.org (CVE-2026-3103)

nvd.nist.gov (CVE-2026-3103)

Download JSON