low3.5
CVE-2024-42325
Zabbix API user.get returns all users that share common group with the calling user.
Impact
Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Zabbix | from 5.0.0 before 5.0.46 from 6.0.0 before 6.0.38 from 7.0.0 before 7.0.9 from 7.2.0 before 7.2.3 |