Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-22114

System Information Widget in Global View Dashboard exposes information about Hosts to Users without Permission

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zabbix

Description

User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix

Default version status: unaffected

  • 5,0,0 to ≤ 5.0.42affected
  • 6.0 to ≤ 6.0.30affected
  • 6.4.0 to ≤ 6.4.15affected
  • 7.0.0alpha1 to ≤ 7.0.0rc2affected

References