CVE-2024-1742
No fix known EPSS <1%CVSS 3.8
Invocation of the sqlplus command with sensitive information in the command line in the mk_oracle Checkmk agent plugin before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41 and 2.0.0 (EOL) allows the extraction of this information from the process list.
Products: Checkmk GmbH Checkmk, checkmk
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 18.04 LTS | check-mk | no fix |
| Ubuntu Pro 16.04 LTS | check-mk | no fix |