Description (CNA)
Setting SMS media allows to set GSM modem file. Later this file is used as Linux device. But due everything is a file for Linux, it is possible to set another file, e.g. log file and zabbix_server will try to communicate with it as modem. As a result, log file will be broken with AT commands and small part for log file content will be leaked to UI.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Zabbix / Zabbix | affected 5.0.0 through 5.0.42; affected 6.0.0 through 6.0.30; affected 6.4.0 through 6.4.15; affected 7.0.0alpha1 through 7.0.0rc2 |
CWE
CWE-94
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.