Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-32725

Опубликовано: 18 дек. 2023
Источник: ubuntu
Приоритет: medium
CVSS3: 9.6

Описание

The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

1:6.0.29+dfsg-1
esm-apps/bionic

not-affected

code not present
esm-apps/focal

not-affected

code not present
esm-apps/jammy

not-affected

code not present
esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

not-affected

code not present
focal

not-affected

code not present
jammy

not-affected

code not present
lunar

ignored

end of life, was needs-triage

Показывать по

9.6 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.6
nvd
почти 2 года назад

The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.

CVSS3: 9.6
debian
почти 2 года назад

The website configured in the URL widget will receive a session cookie ...

CVSS3: 9.6
fstec
почти 2 года назад

Уязвимость файла cookie zbx_session универсальной системы мониторинга Zabbix, позволяющая нарушителю повысить свои привилегии

CVSS3: 9.8
redos
больше 1 года назад

Множественные уязвимости zabbix

9.6 Critical

CVSS3