Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Checkmk 2.1.0p41, 2.2.0p24, 2.3.0b4 Clear all filters
TI-2024-19036 CVE-2024-28824 · GHSA-xx7c-hx38-xm2p

Privilege escalation in mk_informix plugin

Priority LOW 39

Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41 and 2.0.0 (EOL) allows local users to escalate privileges.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0018 Published 2024-03-22 Fixed in 2.3.0b4, 2.2.0p24 +1 CWE-272
TI-2024-01620 CVE-2024-1742 · GHSA-672v-64m3-xh38

Information disclosure in mk_oracle Checkmk agent plugin

Priority LOW 20

Invocation of the sqlplus command with sensitive information in the command line in the mk_oracle Checkmk agent plugin before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41 and 2.0.0 (EOL) allows the extraction of this infor…

CVSS 3.1LOW 3.8 Local Low privileges No interaction EPSS 0.00247 Published 2024-03-22 Fixed in 2.3.0b4, 2.2.0p24 +1 CWE-214
TI-2024-00589 CVE-2024-0638 · GHSA-8q44-9g8q-jmqv

Privilege escalation in mk_oracle plugins

Priority LOW 37

Least privilege violation in the Checkmk agent plugins mk_oracle, mk_oracle.ps1, and mk_oracle_crs before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41 and 2.0.0 (EOL) allows local users to escalate privileges.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00196 Published 2024-03-22 Fixed in 2.3.0b4, 2.2.0p24 +1 CWE-272