Описание
Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| zabbix | unfixed | package | ||
| zabbix | not-affected | bookworm | package | |
| zabbix | not-affected | bullseye | package |
Примечания
https://support.zabbix.com/browse/ZBX-26988
Internal issue DEV-4292
Introduced by: https://github.com/zabbix/zabbix/commit/d4a2ba44e484a2ef0471ae5f839f94aa7357c3b0 (7.0.0beta1)
Fixed by: https://github.com/zabbix/zabbix/commit/2d607ccd0d099757e48bbb9d3abb7571268ed87e (7.0.14rc1)
Fixed by: https://github.com/zabbix/zabbix/commit/de83eeea59ca18e5a435a517570f8e6925f124ec (7.2.8rc1)
Fixed in 7.0.14, 7.2.8
EPSS
Связанные уязвимости
Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them.
Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them.
Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them.
Уязвимость универсальной системы мониторинга Zabbix, связана с неправильной авторизацией, позволяющая нарушителю получить доступ к конфиденциальной информации
EPSS