Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-22121
HistoryAug 12, 2024 - 1:38 p.m.

CVE-2024-22121

2024-08-1213:38:16
Alpine Linux Development Team
security.alpinelinux.org
2
zabbix agent
non-admin user
integrity
application availability
cve-2024-22121
unix

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

AI Score

7.3

Confidence

Low

EPSS

0

Percentile

9.5%

A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application.

OSVersionArchitecturePackageVersionFilename
Alpine3.20-communitynoarchzabbix= 6.4.15-r2UNKNOWN

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

AI Score

7.3

Confidence

Low

EPSS

0

Percentile

9.5%