Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cv64-6j2c-f8cg

Опубликовано: 06 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1

Описание

An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.

An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.

EPSS

Процентиль: 2%
0.00012
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-863

Связанные уязвимости

ubuntu
23 дня назад

An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.

CVSS3: 7.6
redhat
23 дня назад

An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.

nvd
23 дня назад

An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.

debian
23 дня назад

An authenticated Zabbix user (User role) with template/host write perm ...

EPSS

Процентиль: 2%
0.00012
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-863