Checkmk mk_informix Plugin Privilege Escalation Fix (CVE-2024-28824)

Critical Vulnerability Information Vulnerability Details Title: mk_informix: Do not allow privilege escalation Vulnerability ID: Werk #16198 Date: Mar 8, 2024 Severity Level: Trivial Change Category: Security Fix Compatibility: Compatible - no manual interaction needed Affected Versions: - 2.3.0 (beta) - 2.2.0 - 2.1.0 - 2.0.0 (EOL) Impact and Fix Issue Description: Previously, the Informix database monitoring plugin would parse eval statements from $INFORMIXDIR/bin/onstat. Since the plugin typically runs as root, any injected statements into $INFORMIXDIR/bin/onstat could also run as root. By placing a script with the same name as other functions in $INFORMIXDIR/bin and $PATH, it was possible to shadow the original functions, causing custom scripts to execute as root. This could ultimately lead to $INFORMIXDIR/bin/onstat being executed as root, allowing replacement scripts to run with elevated privileges. Fix: The plugin now exports environment variables, and $PATH is searched before $INFORMIXDIR/bin. Additionally, the plugin now checks whether $INFORMIXDIR/bin/onstat belongs to root; if the plugin is running as root, it will not execute the onstat command. Vulnerability Rating and Management CVSS Score: 8.8 (High) CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE ID: CVE-2024-28824 Vulnerability Management: This issue was discovered during internal review, reviewed, fixed, and assigned the corresponding CVE ID.

Goal Reached Thanks to every supporter — we hit 100%!

Checkmk mk_informix Plugin Privilege Escalation Fix (CVE-2024-28824)