CVE-2024-1742

LOW

Information disclosure in mk_oracle Checkmk agent plugin

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-1742 has a selected CVSS score of 3.8 (low).

Description

Invocation of the sqlplus command with sensitive information in the command line in the mk_oracle Checkmk agent plugin before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41 and 2.0.0 (EOL) allows the extraction of this information from the process list.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 28, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Checkmk

Browse Checkmk GmbH / Checkmk

Default status: unaffected

CVE List2.3.0 to < 2.3.0b4affected
2.2.0 to < 2.2.0p24affected
2.1.0 to < 2.1.0p41affected
2.0.0 to ≤ 2.0.0p39affected

checkmk

Browse checkmk / checkmk

Default status: unaffected

CVE List2.3.0 to < 2.3.0b4affected
2.2.0 to < 2.2.0p24affected
2.1.0 to < 2.1.0p41affected
2.0.0 to < 2.0.0p39affected

References

2