CVE-2024-22114 — System Information Widget in Global View Dashboard exposes information about Hosts to Users without Permission

CVE-2024-22114

System Information Widget in Global View Dashboard exposes information about Hosts to Users without Permission PUBLISHED

Description (CNA)

User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard.

Affected (CNA)

Vendor / product	Versions
Zabbix / Zabbix	affected 5,0,0 through 5.0.42; affected 6.0 through 6.0.30; affected 6.4.0 through 6.4.15; affected 7.0.0alpha1 through 7.0.0rc2

CWE

CWE-281

References

https://support.zabbix.com/browse/ZBX-25015

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://lists.debian.org/debian-lts-announce/2024/10/msg00000.html