CVE-2024-42325
Excessive information returned by user.get
Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc.
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Zabbix · ZabbixQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →