CVE-2024-3367
- Source
- https://cve.org/CVERecord?id=CVE-2024-3367
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-3367.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-3367
- Downstream
- Published
- 2024-04-16T11:59:43Z
- Modified
- 2026-10-24T10:33:14Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N CVSS Calculator
- Summary
- Argument injection to runmqsc
- Details
-
Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p26 and <2.3.0b5 allows local attacker to inject one argument to runmqsc
- Database specific
{ "cna_assigner": "Checkmk", "cwe_ids": [ "CWE-88" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/3xxx/CVE-2024-3367.json", "unresolved_ranges": [ { "extracted_events": [ { "range": [ { "introduced": "2.3.0" }, { "fixed": "2.3.0b5" }, { "introduced": "2.2.0" }, { "fixed": "2.2.0p26" }, { "introduced": "2.1.0" }, { "fixed": "2.1.0p99" }, { "introduced": "2.0.0" }, { "last_affected": "2.0.0p39" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" } ] } ] }- References
Affected packages
Git / github.com/checkmk/checkmk
Affected ranges
- Type
- GIT
- Repo
- https://github.com/checkmk/checkmk
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "last_affected": "2.0.0" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.1.0:*:*:*:*:*:*:*", "range": [ { "introduced": "2.1.0" }, { "last_affected": "2.1.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:-:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-NA" }, { "last_affected": "2.2.0-NA" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:b1:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-b1" }, { "last_affected": "2.2.0-b1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:i1:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-i1" }, { "last_affected": "2.2.0-i1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p1:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p1" }, { "last_affected": "2.2.0-p1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:b2:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-b2" }, { "last_affected": "2.2.0-b2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p2:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p2" }, { "last_affected": "2.2.0-p2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:b3:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-b3" }, { "last_affected": "2.2.0-b3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p3:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p3" }, { "last_affected": "2.2.0-p3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:b4:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-b4" }, { "last_affected": "2.2.0-b4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p4:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p4" }, { "last_affected": "2.2.0-p4" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:b5:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-b5" }, { "last_affected": "2.2.0-b5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p5:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p5" }, { "last_affected": "2.2.0-p5" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:b6:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-b6" }, { "last_affected": "2.2.0-b6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p6:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p6" }, { "last_affected": "2.2.0-p6" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:b7:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-b7" }, { "last_affected": "2.2.0-b7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p7:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p7" }, { "last_affected": "2.2.0-p7" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:b8:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-b8" }, { "last_affected": "2.2.0-b8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p8:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p8" }, { "last_affected": "2.2.0-p8" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p10:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p10" }, { "last_affected": "2.2.0-p10" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p11:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p11" }, { "last_affected": "2.2.0-p11" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p12:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p12" }, { "last_affected": "2.2.0-p12" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p13:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p13" }, { "last_affected": "2.2.0-p13" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p14:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p14" }, { "last_affected": "2.2.0-p14" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p15:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p15" }, { "last_affected": "2.2.0-p15" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p16:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p16" }, { "last_affected": "2.2.0-p16" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p17:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p17" }, { "last_affected": "2.2.0-p17" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p18:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p18" }, { "last_affected": "2.2.0-p18" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p19:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p19" }, { "last_affected": "2.2.0-p19" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p20:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p20" }, { "last_affected": "2.2.0-p20" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p21:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p21" }, { "last_affected": "2.2.0-p21" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p22:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p22" }, { "last_affected": "2.2.0-p22" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p23:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p23" }, { "last_affected": "2.2.0-p23" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p24:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p24" }, { "last_affected": "2.2.0-p24" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p25:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p25" }, { "last_affected": "2.2.0-p25" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.2.0:p9:*:*:*:*:*:*", "range": [ { "introduced": "2.2.0-p9" }, { "last_affected": "2.2.0-p9" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.3.0:b1:*:*:*:*:*:*", "range": [ { "introduced": "2.3.0-b1" }, { "last_affected": "2.3.0-b1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.3.0:b2:*:*:*:*:*:*", "range": [ { "introduced": "2.3.0-b2" }, { "last_affected": "2.3.0-b2" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.3.0:b3:*:*:*:*:*:*", "range": [ { "introduced": "2.3.0-b3" }, { "last_affected": "2.3.0-b3" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:checkmk:checkmk:2.3.0:b4:*:*:*:*:*:*", "range": [ { "introduced": "2.3.0-b4" }, { "last_affected": "2.3.0-b4" } ], "source": "CPE_STRING" } ] }
Affected versions
1.*
1.1.0beta17
2.*
2.1.0
2.2.0-NA
2.2.0-b1
2.2.0-b2
2.2.0-b3
2.2.0-b4
2.2.0-b5
2.2.0-b6
2.2.0-b7
2.2.0-b8
2.2.0-p10
2.2.0-p11
2.2.0-p12
2.2.0-p13
2.2.0-p14
2.2.0-p15
2.2.0-p16
2.2.0-p17
2.2.0-p18
2.2.0-p19
2.2.0-p20
2.2.0-p21
2.2.0-p22
2.2.0-p23
2.2.0-p24
2.2.0-p25
2.2.0-p9
2.3.0-b1
2.3.0-b2
2.3.0-b3
2.3.0-b4
v1.*
v1.1.0
v1.1.10
v1.1.10b1
v1.1.10b2
v1.1.11i1
v1.1.11i2
v1.1.11i3
v1.1.13i2
v1.1.13i3
v1.1.2
v1.1.3
v1.1.4
v1.1.6
v1.1.6b2
v1.1.7i2
v1.1.7i3
v1.1.7i4
v1.1.7i5
v1.1.8
v1.1.8b1
v1.1.8b2
v1.1.8b3
v1.1.9i1
v1.1.9i3
v1.1.9i4
v1.1.9i5
v1.1.9i7
v1.1.9i8
v1.1.9i9
v1.2.0b2
v1.2.0b3
v1.2.0b4
v1.2.0p1
v1.2.1i5
v1.2.3i4
v1.2.3i5
v1.2.3i6
v1.2.5i1
v1.2.5i6
v1.4.0i1
v1.4.0i2
v1.4.0i3
v1.5.0i1
v1.5.0i2
v1.5.0i3
v1.6.0b1
v2.*
v2.0.0
v2.0.0b1
v2.0.0b2
v2.0.0b3
v2.0.0b4
v2.0.0b5
v2.0.0b6
v2.0.0b7
v2.0.0i1
v2.3.0-rc1
v2.3.0b1
v2.3.0b1-rc1
v2.3.0b1-rc2
v2.3.0b2
v2.3.0b2-rc1
v2.3.0b3
v2.3.0b3-rc1
v2.3.0b4-rc1
v2.3.0b4-rc2
v2.3.0b5
v2.3.0b5-rc1
v2.3.0b6-rc1
v2.3.0p1
v2.3.0p1-rc1
v2.3.0p2
v2.3.0p2-rc1
v2.3.0p3-rc1
v2.3.0p4
v2.3.0p4-rc1