Skip to content
CVE PROGRAM SOURCE RECORD2.1 Low

CVE-2024-42325

Excessive information returned by user.get

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zabbix

Description

Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Zabbix

Default version status: unaffected

  • 5.0.0 to ≤ 5.0.45affected
  • 6.0.0 to ≤ 6.0.37affected
  • 7.0.0 to ≤ 7.0.8affected
  • 7.2.0 to ≤ 7.2.2affected

References