Created on 2024-12-04 05:44 and updated on 2024-12-04 08:17.

Description

• cve-2024-22116 9.9 (v3.1) Remote code execution within ping script Zabbix
• cve-2024-36466 8.8 (v3.1) Unauthenticated Zabbix frontend takeover when SSO is b… Zabbix
• cve-2024-36467 7.5 (v3.1) Authentication privilege escalation via user groups du… Zabbix
• cve-2024-42330 9.1 (v3.1) JS - Internal strings in HTTP headers Zabbix
• cve-2024-42327 9.9 (v3.1) SQL injection in user.get API Zabbix

Vulnerabilities included in this bundle

• CVE-2024-36466: Unauthenticated Zabbix frontend takeover when SSO is being used
• CVE-2024-42327: SQL injection in user.get API
• CVE-2024-22116: Remote code execution within ping script
• CVE-2024-36467:
• cve-2024-42330:
• CVE-2024-42330:

Author

Alexandre Dulaunoy

---

Combined sightings