Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-22114
HistoryAug 12, 2024 - 1:38 p.m.

CVE-2024-22114

2024-08-1213:38:15
Alpine Linux Development Team
security.alpinelinux.org
1
access control
system information
global view
dashboard
statistics
unix

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

9.5%

User with no permission to any of the Hosts can access and view host count & other statistics through System Information Widget in Global View Dashboard.

OSVersionArchitecturePackageVersionFilename
Alpine3.20-communitynoarchzabbix= 6.4.15-r2UNKNOWN

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0

Percentile

9.5%