LOWCVSS v4 2.0Vulnerability
CVE-2026-103682
Invocation of the Jolokia special agent with the login password in the command line in Checkmk versions 2.5.0 before 2.5.0p16 allows a local user on the Checkmk server to read the Jolokia login password from the process list while the special agent is running. This affects both explicitly configured passwords and passwords from the password store.
Properties
- Severity
- LOW
- Nvd fetched at
- 2026-11-07T06:40:34.987550+00:00
- Epss score
- 0.00099
- Cvss severity
- LOW
- Cvss score
- 2
- Retrieved at
- 2026-11-07T06:44:43+00:00
- Last source
- FIRST EPSS
- Score
- 2
- Cvss version
- 4.0
- Cve id
- CVE-2026-103682
- Cvss vector
- CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- First seen by Signal
- 2026-11-06T10:16:10+00:00
- Name
- CVE-2026-103682
- Vector
- CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Published at
- 2026-11-06T09:16:59.360
- Last modified
- 2026-11-06T09:16:59.480
- Epss percentile
- 0.00821
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph