CVE-2024-3367CWE-88

Argument injection to runmqsc

Medium · published April 16, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
23.1
In the wild
Unconfirmed
What it is

Argument injection in websphere_mq agent plugin in Checkmk 2.0.0, 2.1.0, <2.2.0p26 and <2.3.0b5 allows local attacker to inject one argument to runmqsc

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00314 · 23.1th percentile
Weakness
CWE-88 · Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Published
2024-04-16T11:59Z
EPSS history
Timeline
  • 16 APR 11:59Z
    Argument injection to runmqsc
    cvelistv5