CyberRota Analysis
AI-GeneratedA vulnerability in Checkmate versions up to 3.11.0 on Windows allows users with read-only permissions to bypass role guard middleware, enabling them to perform administrative actions such as creating maintenance windows, modifying notification channels, and deleting check history. This can lead to significant operational disruptions and the potential concealment of security incidents. Organizations utilizing Checkmate should prioritize remediation to mitigate the risk of unauthorized access and data manipulation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Checkmate through 3.11.0 omits the isAllowed role guard middleware on maintenance-window, notification, and check-deletion routes, allowing read-only users to perform administrative actions. Attackers with user-role sessions can create arbitrary maintenance windows to silence alerts, modify notification channels, and delete monitor check history to erase incident evidence.