Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing hosts by observing different HTTP response codes in agent-receiver/register_existing endpoint, which could lead to information disclosure.
References
| Link | Resource |
|---|---|
| https://checkmk.com/werk/18993 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2026-03-13 19:54
Updated : 2026-03-18 13:37
NVD link : CVE-2026-24097
Mitre link : CVE-2026-24097
CVE.ORG link : CVE-2026-24097
JSON object : View
Products Affected
checkmk
- checkmk
CWE
CWE-204
Observable Response Discrepancy
