What is GHSA-c84g-3xmv-j872?

GHSA-c84g-3xmv-j872 is a security advisory published by GitHub Security Advisories with Low severity. Incorrect authorization in frozen BI aggregations in Checkmk \u003c2.5.0p2, \u003c2.4.0p29, \u003c2.3.0p47, and...

Which CVE IDs does GHSA-c84g-3xmv-j872 cover?

GHSA-c84g-3xmv-j872 covers the following CVE IDs: CVE-2026-7485. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-c84g-3xmv-j872Low

Incorrect authorization in frozen BI aggregations in Checkmk <2.5.0p2, <2.4.0p29, <2.3.0p47, and...

Vendor

GitHub Security Advisories

Published

August 20, 2026

Last Modified

August 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-7485 →

📋 Description

Incorrect authorization in frozen BI aggregations in Checkmk <2.5.0p2, <2.4.0p29, <2.3.0p47, and all 2.2.0 versions allows an authenticated user with restricted host and service visibility to learn the names and the existence of hosts and services they are not authorized to see.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-7485
https://checkmk.com/werk/16917
https://github.com/advisories/GHSA-c84g-3xmv-j872