CVE-2024-1742
Information disclosure in mk_oracle Checkmk agent plugin
Résumé
Information disclosure in mk_oracle Checkmk agent plugin
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Invocation of the sqlplus command with sensitive information in the command line in the mk_oracle Checkmk agent plugin before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41 and 2.0.0 (EOL) allows the extraction of this information from the process list.
Références
- advisory github.com
- advisory nvd.nist.gov
- web checkmk.com