6.1

CVE-2024-22121

Zabbix Agent MSI Installer Allows Non-Admin User to Access Change Option via msiexec.exe

A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zabbix ≫ Zabbix Version >= 5.0.0 <= 5.0.42
Zabbix ≫ Zabbix Version >= 6.0.0 <= 6.0.30
Zabbix ≫ Zabbix Version >= 6.4.0 <= 6.4.15
Zabbix ≫ Zabbix Version 7.0.0 Update alpha1
Zabbix ≫ Zabbix Version 7.0.0 Update alpha2
Zabbix ≫ Zabbix Version 7.0.0 Update alpha3
Zabbix ≫ Zabbix Version 7.0.0 Update alpha4
Zabbix ≫ Zabbix Version 7.0.0 Update alpha5
Zabbix ≫ Zabbix Version 7.0.0 Update alpha6
Zabbix ≫ Zabbix Version 7.0.0 Update alpha7
Zabbix ≫ Zabbix Version 7.0.0 Update alpha8
Zabbix ≫ Zabbix Version 7.0.0 Update alpha9
Zabbix ≫ Zabbix Version 7.0.0 Update beta1
Zabbix ≫ Zabbix Version 7.0.0 Update beta2
Zabbix ≫ Zabbix Version 7.0.0 Update beta3
Zabbix ≫ Zabbix Version 7.0.0 Update rc1
Zabbix ≫ Zabbix Version 7.0.0 Update rc2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.138
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.1 1.8 4.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
security@zabbix.com 6.1 1.8 4.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
CWE-281 Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

https://support.zabbix.com/browse/ZBX-25011
Vendor Advisory