This vulnerability (CWE-862) in Checkmk involves missing authorization controls that permit authenticated users lacking the appropriate permission to edit reports owned by other users. The affected versions include Checkmk versions less than 2.5.0p10, less than 2.4.0p35, less than 2.3.0p49, and version 2.2.0 (EOL). The CVSS 4.0 base score is 5.3, indicating a medium severity. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

An authenticated user without the 'Edit foreign Reports' permission can modify reports owned by other users, potentially leading to unauthorized changes in report data. This could affect data integrity and trustworthiness of reports within the Checkmk system. There is no indication of privilege escalation beyond report modification or other impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor Checkmk vendor communications for updates. Until a patch is available, restrict authenticated user permissions carefully to limit exposure.