Description
An authenticated user with API access (e.g.: user with default User role), more specifically a user with access to the user.update API endpoint is enough to be able to add themselves to any group (e.g.: Zabbix Administrators), except to groups that are disabled or having restricted GUI access.
INFO
Published Date :
2024-11-27T06:16:30.381Z
Last Modified :
2024-12-04T14:36:54.043Z
Source :
Zabbix
AFFECTED PRODUCTS
The following products are affected by CVE-2024-36467 vulnerability.
| Vendors | Products |
|---|---|
| Zabbix |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-36467.
| URL | Resource |
|---|---|
| https://support.zabbix.com/browse/ZBX-25614 |
|
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact