Lucene search
+L

4 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2023-32725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used...

9.6CVSS8.1AI score0.00849EPSS
Exploits0References2
CVE
CVE
added 2023/12/18 9:15 a.m.113 views

CVE-2023-32725

The CVE-2023-32725 issue affects the Zabbix frontend URL widget: testing or running scheduled reports can cause the site to receive a session cookie that can be used to access the frontend as the specific user. Root cause is improper handling of session cookies in the URL widget, enabling session...

9.6CVSS9AI score0.00849EPSS
Exploits0References1Affected Software1
Debian CVE
Debian CVE
added 2023/12/18 9:15 a.m.50 views

CVE-2023-32725

The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user...

9.6CVSS7.1AI score0.00849EPSS
Exploits0
Cvelist
Cvelist
added 2023/12/18 9:15 a.m.31 views

CVE-2023-32725 Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.

The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user...

9.6CVSS9.4AI score0.00849EPSS
Exploits0References1
Rows per page
Query Builder