Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cv64-6j2c-f8cg

Опубликовано: 06 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 8.1

Описание

An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.

An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.

EPSS

Процентиль: 17%
0.00255
Низкий

5.1 Medium

CVSS4

8.1 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 8.1
ubuntu
5 месяцев назад

An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.

CVSS3: 7.6
redhat
5 месяцев назад

An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.

CVSS3: 8.1
nvd
5 месяцев назад

An authenticated Zabbix user (User role) with template/host write permissions is able to create objects via the configuration.import API. This can lead to confidentiality loss by creating unauthorized hosts. Note that the User role is normally not sufficient to create and edit templates/hosts even with write permissions.

CVSS3: 8.1
debian
5 месяцев назад

An authenticated Zabbix user (User role) with template/host write perm ...

CVSS3: 6.4
fstec
5 месяцев назад

Уязвимость универсальной системы мониторинга Zabbix, связанная с недостатками механизма авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 17%
0.00255
Низкий

5.1 Medium

CVSS4

8.1 High

CVSS3

Дефекты

CWE-863