CVE-2024-22114
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2024-22114 is a cybersecurity vulnerability that allows unauthorized users to access and view host count and other statistics through the System Information Widget in the Global View Dashboard. Although users without permission to any of the hosts should be restricted from this information, the vulnerability enables them to bypass these access controls. This issue could potentially lead to the exposure of sensitive information and undermine the security of the system. It is crucial for affected organizations to apply the necessary patches or updates to mitigate this vulnerability and prevent unauthorized access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Zabbix LLC