← CVE Intelligence

CVE-2024-36469

User enumeration via timing attack in Zabbix web interface PUBLISHED

Description (CNA)

Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one.

Affected (CNA)

Vendor / productVersions
Zabbix / Zabbixaffected 5.0.0 through 5.0.45; affected 6.0.0 through 6.0.37; affected 7.0.0 through 7.0.8; affected 7.2.0 through 7.2.2

CWE

CWE-208

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.