Skip to content
OpenAdvisories
High WID-SEC-2024-0678 3 CVEs

Checkmk: Mehrere Schwachstellen

Published Mar 20, 2024 · Updated Nov 18, 2024 · Revision 2 · de-DE

Vendor: Checkmk Product: Checkmk Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Checkmk ausnutzen, um seine Privilegien zu erhöhen oder Informationen offenzulegen.

Product

Checkmk ist eine IT-Monitoring-Software.

Vulnerabilities 3

  • High 8.8
    CVE-2024-28824

    Privilege escalation in mk_informix plugin

    Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41 and 2.0.0 (EOL) allows local users to escalate privileges.

    Checkmk Checkmk check-mk Ubuntu
  • High 8.2
    CVE-2024-0638

    Privilege escalation in mk_oracle plugins

    Least privilege violation in the Checkmk agent plugins mk_oracle, mk_oracle.ps1, and mk_oracle_crs before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41 and 2.0.0 (EOL) allows local users to escalate privileges.

    Checkmk Checkmk check-mk Ubuntu
  • Low 3.8
    CVE-2024-1742

    Information disclosure in mk_oracle Checkmk agent plugin

    Invocation of the sqlplus command with sensitive information in the command line in the mk_oracle Checkmk agent plugin before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41 and 2.0.0 (EOL) allows the extraction of this information from the process list.

    Checkmk Checkmk check-mk Ubuntu

Revision history

  1. #2

    Prüfung Produkteintragung

  2. #1

    Initiale Fassung

References