← Back

CVE-2024-22114

nvd nist
Published: Aug 12, 2024Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard.

Affected (17)

Products: Zabbix: Zabbix
Zabbix
1 product
Zabbix
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Zabbix
Zabbix
From 5.0.0 to 5.0.42
Zabbix
From 6.0.0 to 6.0.30
Zabbix
From 6.4.0 to 6.4.15
Zabbix
Version 7.0.0 alpha1
Zabbix
Version 7.0.0 alpha2
Zabbix
Version 7.0.0 alpha3
Zabbix
Version 7.0.0 alpha4
Zabbix
Version 7.0.0 alpha5
Zabbix
Version 7.0.0 alpha6
Zabbix
Version 7.0.0 alpha7
Zabbix
Version 7.0.0 alpha8
Zabbix
Version 7.0.0 alpha9
Zabbix
Version 7.0.0 beta1
Zabbix
Version 7.0.0 beta2
Zabbix
Version 7.0.0 beta3
Zabbix
Version 7.0.0 rc1
Zabbix
Version 7.0.0 rc2

Related CWEs

CWE-281
Improper Preservation of Permissions
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

References (2)

Source: security@zabbix.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.