← CVE Intelligence

CVE-2024-36466

Unauthenticated Zabbix frontend takeover when SSO is being used PUBLISHED

Description (CNA)

A bug in the code allows an attacker to sign a forged zbx_session cookie, which then allows them to sign in with admin permissions.

Affected (CNA)

Vendor / productVersions
Zabbix / Zabbixaffected 6.0.0 through 6.0.31; affected 6.4.0 through 6.4.16; affected 7.0.0

CWE

CWE-290

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.