← CVE Intelligence

CVE-2024-42325

Excessive information returned by user.get PUBLISHED

Description (CNA)

Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc.

Affected (CNA)

Vendor / productVersions
Zabbix / Zabbixaffected 5.0.0 through 5.0.45; affected 6.0.0 through 6.0.37; affected 7.0.0 through 7.0.8; affected 7.2.0 through 7.2.2

CWE

CWE-359

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.