CVE-2026-113461
2026-10-21
19h16 +00:00
19h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Untrusted Search Path The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control. |
||
| Inclusion of Functionality from Untrusted Control Sphere The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere. |
