1. Home
  2. CVE Database
  3. CVE-2024-42325
LOW · 3.5

CVE-2024-42325

Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc.

Vulnerability Description

Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc.

CVSS Score

3.5

LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ZabbixZabbix>= 5.0.0, < 5.0.46

Related Weaknesses (CWE)

CWE-359

References

FAQ

What is CVE-2024-42325?

CVE-2024-42325 is a vulnerability with a CVSS score of 3.5 (LOW). Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc.

How severe is CVE-2024-42325?

CVE-2024-42325 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-42325?

Check the references section above for vendor advisories and patch information. Affected products include: Zabbix Zabbix.