This vulnerability (CWE-862) in Checkmk allows an authenticated user lacking the specific permission to edit foreign reports to modify reports owned by other users due to missing authorization checks. The affected versions include Checkmk versions prior to 2.5.0p10, 2.4.0p35, 2.3.0p49, and version 2.2.0 (which is end-of-life). The CVSS 4.0 base score is 5.3, indicating a medium severity impact. No official remediation or patch information is provided in the source data, and no known exploits are reported in the wild.

An authenticated user without the required permission can modify reports owned by other users, potentially leading to unauthorized changes in report data. This could affect data integrity and trustworthiness of reports within the Checkmk environment. There is no indication of privilege escalation beyond report modification or other impacts such as data disclosure or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict report editing permissions strictly to trusted users and monitor user activities related to report modifications. No official remediation or temporary fix is documented in the provided data.