CVE-2024-42325
Excessive information returned by user.get
Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc.
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Zabbix · Zabbix¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →