First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-6747

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Information leakage in mknotifyd in Checkmk before 2.3.0p18, 2.2.0p36, 2.1.0p49 and in 2.0.0p39 (EOL) allows attacker to get potentially sensitive data

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-201 CWE-200

Affected software

Vendor	Product	Versions
Checkmk GmbH	Checkmk	>= 2.3.0, < 2.3.0p18; >= 2.2.0, < 2.2.0p36; >= 2.1.0, < 2.1.0p49; >= 2.0.0, <= 2.0.0p39
checkmk	checkmk	>= 2.3.0, < 2.3.0p18; >= 2.2.0, < 2.2.0p36; >= 2.1.0, < 2.1.0p49; >= 2.0.0, < 2.0.0p39

References

https://checkmk.com/werk/17145Vendor Advisory

Timeline

Published: Oct 10, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-67488.3Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injecti CVE-2024-67496.3Seth Fogie, member of the AXIS Camera Station Pro Bug Bounty Program, has found that the Incident report feature may expose sensitive creden CVE-2024-67507.5The Social Auto Poster plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability CVE-2024-67516.5The Social Auto Poster plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.3.14. This is du CVE-2024-67525.4The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wp_name’ parameter in the 'wpw_auto_poster CVE-2024-67536.1The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mapTypes’ parameter in the 'wpw_auto_poste CVE-2024-67544.3The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the ‘wpw_aut CVE-2024-67555.3The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on CVE-2024-67568.8The Social Auto Poster plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpw_auto_pos CVE-2024-67574.3The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Basic Information Exposure in all versio CVE-2024-67586.5Improper Privilege Management in Sprecher Automation SPRECON-E below version 8.71j allows a remote attacker with low privileges to save unau CVE-2024-67595.3When mounting a remote filesystem using NFS, the kernel did not sanitize remotely provided filenames for the path separator character, "/".

CVE-2024-6747: High severity, CVSS 7.5 | Vulnix