CVE-2024-3367

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-3367
Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p26 and <2.3.0b5 allows local attacker to inject one argument to runmqsc

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.0 / Impact : 4.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://checkmk.com/werk/16615
Configurations

No configuration.

History

24 Apr 2024, 12:15

Type Values Removed Values Added
Summary
  • (es) La inyección de argumentos en el complemento del agente websphere_mq en Checkmk 2.0.0, 2.1.0, &lt;2.2.0p25 y &lt;2.3.0b5 permite a un atacante local inyectar un argumento para ejecutar mqsc
Summary (en) Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p25 and <2.3.0b5 allows local attacker to inject one argument to runmqsc (en) Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p26 and <2.3.0b5 allows local attacker to inject one argument to runmqsc

16 Apr 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-16 12:15

Updated : 2024-04-24 12:15

NVD link : CVE-2024-3367

Mitre link : CVE-2024-3367

CVE.ORG link : CVE-2024-3367

JSON object : View

Products Affected

No product.

CWE
CWE-349

Acceptance of Extraneous Untrusted Data With Trusted Data