PT-2024-10427 · Zabbix+3 · Zabbix+3

Jayateerthag · Published 2024-08-09 · Updated 2024-12-04 · CVE-2024-22114

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zabbix (affected versions not specified)

Description The issue is related to incorrect permission storage in the Zabbix monitoring system. This allows an unauthorized user to access and view host count and other statistics through the System Information Widget in the Global View Dashboard.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

ALT-PU-2024-11571

ALT-PU-2024-11575

ALT-PU-2024-15832

BDU:2025-00959

CVE-2024-22114

DLA-3909-1

OPENSUSE-SU-2024:0384-1

Affected Products

Alt Linux

Astra Linux

Debian

Zabbix

References · 27

• https://security-tracker.debian.org/tracker/CVE-2024-22114 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-22114 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-22114 · Security Note
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-22114 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3909-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-22114 · Vendor Advisory
• https://support.zabbix.com/browse/ZBX-25015 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-22114 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0114SE18MD · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:0384-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-22114 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE47 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00959 · Security Note