← Back

CVE-2024-22121

nvd nist
Published: Aug 12, 2024Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Exploitability: 1.8 / Impact: 4.2
Source: NVD

Description

A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application.

Affected (17)

Products: Zabbix: Zabbix
Zabbix
1 product
Zabbix
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Zabbix
Zabbix
From 5.0.0 to 5.0.42
Zabbix
From 6.0.0 to 6.0.30
Zabbix
From 6.4.0 to 6.4.15
Zabbix
Version 7.0.0 alpha1
Zabbix
Version 7.0.0 alpha2
Zabbix
Version 7.0.0 alpha3
Zabbix
Version 7.0.0 alpha4
Zabbix
Version 7.0.0 alpha5
Zabbix
Version 7.0.0 alpha6
Zabbix
Version 7.0.0 alpha7
Zabbix
Version 7.0.0 alpha8
Zabbix
Version 7.0.0 alpha9
Zabbix
Version 7.0.0 beta1
Zabbix
Version 7.0.0 beta2
Zabbix
Version 7.0.0 beta3
Zabbix
Version 7.0.0 rc1
Zabbix
Version 7.0.0 rc2

Related CWEs

CWE-281
Improper Preservation of Permissions
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

References (1)

Source: security@zabbix.com
Vendor Advisory

Timeline

No history available yet.