| Package | Affected versions | Patched versions |
|---|---|---|
| checkmk | = 2.1.0= 2.2.0= 2.3.0≤ 2.0.0 |
Invocation of the sqlplus command with sensitive information in the command line in the mk_oracle Checkmk agent plugin before Checkmk 2.3.0b4 (beta), 2.2.0p24, 2.1.0p41 and 2.0.0 (EOL) allows the extraction of this information from the process list.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free