CVE catalog

CVE-2024-3367

UBUNTU-CVE-2024-3367

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.31% · Oct 25, 2026

Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p26 and <2.3.0b5 allows local attacker to inject one argument to runmqsc

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntucheck-mkpro1.2.6p5-1vulnerable
Ubuntucheck-mkpro1.2.6p12-1vulnerable
Ubuntucheck-mkpro1.2.6p12-1ubuntu0.16.04.1vulnerable
Ubuntucheck-mkpro1.2.6p12-1ubuntu0.16.04.1+esm1vulnerable
Ubuntucheck-mk18.041.2.8p16-1ubuntu0.1vulnerable
Ubuntucheck-mk18.041.2.8p16-1ubuntu0.2vulnerable

Fixed-version evidence

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References