80 matches found
CVE-2018-1999036
An exposure of sensitive information vulnerability exists in Jenkins SSH Agent Plugin 1.15 and earlier in SSHAgentStepExecution.java that exposes the SSH private key password to users with permission to read the build log...
CVE-2025-32917 Privilege escalation in jar_signature
Privilege escalation in jarsignature agent plugin in Checkmk versions 2.4.0b7 beta, 2.3.0p32, 2.2.0p42, and 2.1.0p49 EOL allow user with write access to JAVAHOME/bin directory to escalate privileges...
CVE-2025-32917: Uncontrolled Search Path Element
Privilege escalation in jarsignature agent plugin in Checkmk versions 2.4.0b7 beta, 2.3.0p32, 2.2.0p42, and 2.1.0p49 EOL allow user with write access to JAVAHOME/bin directory to escalate privileges...
CVE-2024-28829
Least privilege violation and reliance on untrusted inputs in the mkinformix Checkmk agent plugin before Checkmk 2.3.0p12, 2.2.0p32, 2.1.0p47 and 2.0.0 EOL allows local users to escalate privileges...
CVE-2024-28829 Privilege escalation in mk_informix plugin
Least privilege violation and reliance on untrusted inputs in the mkinformix Checkmk agent plugin before Checkmk 2.3.0p12, 2.2.0p32, 2.1.0p47 and 2.0.0 EOL allows local users to escalate privileges...
PT-2024-22597 · Checkmk · Checkmk
Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.3.0p12 Checkmk versions prior to 2.2.0p32 Checkmk versions prior to 2.1.0p47 Checkmk version 2.0.0 Description: The issue is related to a least privilege violation and reliance on untrusted inputs in the mk informi...
CVE-2024-3367
Argument injection in webspheremq agent plugin in Checkmk 2.0.0, 2.1.0, 2.2.0p26 and 2.3.0b5 allows local attacker to inject one argument to runmqsc...
CVE-2024-3367 Argument injection to runmqsc
Argument injection in webspheremq agent plugin in Checkmk 2.0.0, 2.1.0, 2.2.0p26 and 2.3.0b5 allows local attacker to inject one argument to runmqsc...
CVE-2024-3367
Argument injection in webspheremq agent plugin in Checkmk 2.0.0, 2.1.0, 2.2.0p26 and 2.3.0b5 allows local attacker to inject one argument to runmqsc...
CVE-2024-3367: Improper Neutralization of Argument Delimiters in a Command
Argument injection in webspheremq agent plugin in Checkmk 2.0.0, 2.1.0, 2.2.0p26 and 2.3.0b5 allows local attacker to inject one argument to runmqsc...
CVE-2024-1742
Invocation of the sqlplus command with sensitive information in the command line in the mkoracle Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows the extraction of this information from the process list...
CVE-2024-28824
Least privilege violation and reliance on untrusted inputs in the mkinformix Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows local users to escalate privileges...
UBUNTU-CVE-2024-28824
Least privilege violation and reliance on untrusted inputs in the mkinformix Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows local users to escalate privileges...
CVE-2024-28824
CVE-2024-28824 affects the mk_informix Checkmk agent plugin. The flaw is a least-privilege violation and reliance on untrusted inputs that allows local privilege escalation. Affected versions are before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41, and 2.0.0 (EOL). Mitigation is to upgrade to the c...
CVE-2024-28824 Privilege escalation in mk_informix plugin
Least privilege violation and reliance on untrusted inputs in the mkinformix Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows local users to escalate privileges...
CVE-2024-1742
Summary: CVE-2024-1742 concerns the mk_oracle Checkmk agent plugin exposing sensitive information by invoking sqlplus on the command line, allowing leakage from the process list. What is affected: Checkmk agent plugins mk_oracle prior to versions: 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41, and 2.0.0 (EO...
CVE-2024-1742 Information disclosure in mk_oracle Checkmk agent plugin
Invocation of the sqlplus command with sensitive information in the command line in the mkoracle Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows the extraction of this information from the process list...
Checkmk 安全漏洞
Checkmk is an editor. A security vulnerability exists in Checkmk versions prior to 2.3.0b4 beta, 2.2.0p24, 2.1.0p41, and 2.0.0 EOL, which stems from a call to a sqlplus command on the agent plugin mkoracle Checkmk command line that contains sensitive information, allowing a list of this informati...