CVE-2024-36466

8.8

HIGHCVSS v3

Published

November 28, 2024

Affected

6 projects

Assigned by

Severity scale

010

Description

A bug in the code allows an attacker to sign a forged zbx_session cookie, which then allows them to sign in with admin permissions.

Python Package IndexPython module to work with zabbix.

>= 6.0.0, < 6.0.32, >= 6.4.0, < 6.4.17, = 7.0.0NVD

Crates.iozabbix

>= 6.0.0, < 6.0.32, >= 6.4.0, < 6.4.17, = 7.0.0NVD

NuGet Gallery

Package Description

>= 6.0.0, < 6.0.32, >= 6.4.0, < 6.4.17, = 7.0.0NVD

NPMA minimal wrapper around request.js to facilitate fetching data from the Zabbix API.

>= 6.0.0, < 6.0.32, >= 6.4.0, < 6.4.17, = 7.0.0NVD

RubyGemssend data to zabbix from ruby

>= 6.0.0, < 6.0.32, >= 6.4.0, < 6.4.17, = 7.0.0NVD

GitHubReal-time monitoring of IT components and services, such as networks, servers, VMs, applications and the cloud.

>= 6.0.0, < 6.0.32, >= 6.4.0, < 6.4.17, = 7.0.0NVD