CVE-2024-3367

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-3367
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-3367.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-3367
Downstream
Published
2024-04-16T11:59:43.845Z
Modified
2026-07-08T08:10:14.803267581Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N CVSS Calculator
Summary
Argument injection to runmqsc
Details

Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p26 and <2.3.0b5 allows local attacker to inject one argument to runmqsc

Database specific 
{
    "cna_assigner": "Checkmk",
    "cwe_ids": [
        "CWE-88"
    ],
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "2.3.0"
                },
                {
                    "fixed": "2.3.0b5"
                },
                {
                    "introduced": "2.2.0"
                },
                {
                    "fixed": "2.2.0p26"
                },
                {
                    "introduced": "2.1.0"
                },
                {
                    "fixed": "2.1.0p99"
                },
                {
                    "introduced": "2.0.0"
                },
                {
                    "last_affected": "2.0.0p39"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/3xxx/CVE-2024-3367.json"
}
References

Affected packages

Git / github.com/checkmk/checkmk

Affected ranges

Type
GIT
Repo
https://github.com/checkmk/checkmk
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a08e390df0ae711bbee6fbdd0d32da1452918ae3
Introduced
6a686961c4b760c55a13cfdb61e7c02be832a0be
Last affected
2a6bc3d8dc8852375275f81654dd00a1f94f5ffd
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.0"
        },
        {
            "introduced": "2.1.0"
        },
        {
            "last_affected": "2.1.0"
        },
        {
            "introduced": "2.2.0-NA"
        },
        {
            "last_affected": "2.2.0-NA"
        },
        {
            "introduced": "2.2.0-b1"
        },
        {
            "last_affected": "2.2.0-b1"
        },
        {
            "introduced": "2.2.0-i1"
        },
        {
            "last_affected": "2.2.0-i1"
        },
        {
            "introduced": "2.2.0-p1"
        },
        {
            "last_affected": "2.2.0-p1"
        },
        {
            "introduced": "2.2.0-b2"
        },
        {
            "last_affected": "2.2.0-b2"
        },
        {
            "introduced": "2.2.0-p2"
        },
        {
            "last_affected": "2.2.0-p2"
        },
        {
            "introduced": "2.2.0-b3"
        },
        {
            "last_affected": "2.2.0-b3"
        },
        {
            "introduced": "2.2.0-p3"
        },
        {
            "last_affected": "2.2.0-p3"
        },
        {
            "introduced": "2.2.0-b4"
        },
        {
            "last_affected": "2.2.0-b4"
        },
        {
            "introduced": "2.2.0-p4"
        },
        {
            "last_affected": "2.2.0-p4"
        },
        {
            "introduced": "2.2.0-b5"
        },
        {
            "last_affected": "2.2.0-b5"
        },
        {
            "introduced": "2.2.0-p5"
        },
        {
            "last_affected": "2.2.0-p5"
        },
        {
            "introduced": "2.2.0-b6"
        },
        {
            "last_affected": "2.2.0-b6"
        },
        {
            "introduced": "2.2.0-p6"
        },
        {
            "last_affected": "2.2.0-p6"
        },
        {
            "introduced": "2.2.0-b7"
        },
        {
            "last_affected": "2.2.0-b7"
        },
        {
            "introduced": "2.2.0-p7"
        },
        {
            "last_affected": "2.2.0-p7"
        },
        {
            "introduced": "2.2.0-b8"
        },
        {
            "last_affected": "2.2.0-b8"
        },
        {
            "introduced": "2.2.0-p8"
        },
        {
            "last_affected": "2.2.0-p8"
        },
        {
            "introduced": "2.2.0-p10"
        },
        {
            "last_affected": "2.2.0-p10"
        },
        {
            "introduced": "2.2.0-p11"
        },
        {
            "last_affected": "2.2.0-p11"
        },
        {
            "introduced": "2.2.0-p12"
        },
        {
            "last_affected": "2.2.0-p12"
        },
        {
            "introduced": "2.2.0-p13"
        },
        {
            "last_affected": "2.2.0-p13"
        },
        {
            "introduced": "2.2.0-p14"
        },
        {
            "last_affected": "2.2.0-p14"
        },
        {
            "introduced": "2.2.0-p15"
        },
        {
            "last_affected": "2.2.0-p15"
        },
        {
            "introduced": "2.2.0-p16"
        },
        {
            "last_affected": "2.2.0-p16"
        },
        {
            "introduced": "2.2.0-p17"
        },
        {
            "last_affected": "2.2.0-p17"
        },
        {
            "introduced": "2.2.0-p18"
        },
        {
            "last_affected": "2.2.0-p18"
        },
        {
            "introduced": "2.2.0-p19"
        },
        {
            "last_affected": "2.2.0-p19"
        },
        {
            "introduced": "2.2.0-p20"
        },
        {
            "last_affected": "2.2.0-p20"
        },
        {
            "introduced": "2.2.0-p21"
        },
        {
            "last_affected": "2.2.0-p21"
        },
        {
            "introduced": "2.2.0-p22"
        },
        {
            "last_affected": "2.2.0-p22"
        },
        {
            "introduced": "2.2.0-p23"
        },
        {
            "last_affected": "2.2.0-p23"
        },
        {
            "introduced": "2.2.0-p24"
        },
        {
            "last_affected": "2.2.0-p24"
        },
        {
            "introduced": "2.2.0-p25"
        },
        {
            "last_affected": "2.2.0-p25"
        },
        {
            "introduced": "2.2.0-p9"
        },
        {
            "last_affected": "2.2.0-p9"
        },
        {
            "introduced": "2.3.0-b1"
        },
        {
            "last_affected": "2.3.0-b1"
        },
        {
            "introduced": "2.3.0-b2"
        },
        {
            "last_affected": "2.3.0-b2"
        },
        {
            "introduced": "2.3.0-b3"
        },
        {
            "last_affected": "2.3.0-b3"
        },
        {
            "introduced": "2.3.0-b4"
        },
        {
            "last_affected": "2.3.0-b4"
        }
    ],
    "cpe": [
        "cpe:2.3:a:checkmk:checkmk:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.1.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:-:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:b1:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:i1:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p1:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:b2:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p2:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:b3:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p3:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:b4:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p4:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:b5:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p5:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:b6:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p6:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:b7:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p7:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:b8:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p8:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p10:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p11:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p12:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p13:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p14:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p15:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p16:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p17:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p18:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p19:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p20:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p21:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p22:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p23:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p24:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p25:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.2.0:p9:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.3.0:b1:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.3.0:b2:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.3.0:b3:*:*:*:*:*:*",
        "cpe:2.3:a:checkmk:checkmk:2.3.0:b4:*:*:*:*:*:*"
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

1.*
1.1.0beta17
2.*
2.1.0
2.2.0-NA
2.2.0-b1
2.2.0-b2
2.2.0-b3
2.2.0-b4
2.2.0-b5
2.2.0-b6
2.2.0-b7
2.2.0-b8
2.2.0-p10
2.2.0-p11
2.2.0-p12
2.2.0-p13
2.2.0-p14
2.2.0-p15
2.2.0-p16
2.2.0-p17
2.2.0-p18
2.2.0-p19
2.2.0-p20
2.2.0-p21
2.2.0-p22
2.2.0-p23
2.2.0-p24
2.2.0-p25
2.2.0-p9
2.3.0-b1
2.3.0-b2
2.3.0-b3
2.3.0-b4
v1.*
v1.1.0
v1.1.10
v1.1.10b1
v1.1.10b2
v1.1.11i1
v1.1.11i2
v1.1.11i3
v1.1.13i2
v1.1.13i3
v1.1.2
v1.1.3
v1.1.4
v1.1.6
v1.1.6b2
v1.1.7i2
v1.1.7i3
v1.1.7i4
v1.1.7i5
v1.1.8
v1.1.8b1
v1.1.8b2
v1.1.8b3
v1.1.9i1
v1.1.9i3
v1.1.9i4
v1.1.9i5
v1.1.9i7
v1.1.9i8
v1.1.9i9
v1.2.0b2
v1.2.0b3
v1.2.0b4
v1.2.0p1
v1.2.1i5
v1.2.3i4
v1.2.3i5
v1.2.3i6
v1.2.5i1
v1.2.5i6
v1.4.0i1
v1.4.0i2
v1.4.0i3
v1.5.0i1
v1.5.0i2
v1.5.0i3
v1.6.0b1
v2.*
v2.0.0
v2.0.0b1
v2.0.0b2
v2.0.0b3
v2.0.0b4
v2.0.0b5
v2.0.0b6
v2.0.0b7
v2.0.0i1
v2.3.0-rc1
v2.3.0b1
v2.3.0b1-rc1
v2.3.0b1-rc2
v2.3.0b2
v2.3.0b2-rc1
v2.3.0b3
v2.3.0b3-rc1
v2.3.0b4-rc1
v2.3.0b4-rc2
v2.3.0b5
v2.3.0b5-rc1
v2.3.0b6-rc1
v2.3.0p1
v2.3.0p1-rc1
v2.3.0p2
v2.3.0p2-rc1
v2.3.0p3-rc1
v2.3.0p4
v2.3.0p4-rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-3367.json"