Linux Distros Unpatched Vulnerability : CVE-2024-36466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions. CVE-2024-36466 Note that Ness...

Zabbix 6.0.x < 6.0.32rc1, 6.4.x < 6.4.17rc1, 7.0.x < 7.0.1rc1 Authentication Bypass (ZBX-25635)

The version of Zabbix installed on the remote host is prior to 6.0.32rc1, 6.4.17rc1 and 7.0.1rc1. It is therefore affected by authentication bypass vulnerability. - A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

UBUNTU-CVE-2024-36466

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2024-36466

creationtimestamp| type| source ---|---|--- 2024-11-28 07:27:58+00:00| seen| https://infosec.exchange/users/cve/statuses/113559396561098054 2024-12-02 19:00:06+00:00| seen| https://t.me/truesecator/6498 2024-12-04 05:44:04+00:00| seen|...

CVE-2024-36466 Unauthenticated Zabbix frontend takeover when SSO is being used

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2024-36466 Unauthenticated Zabbix frontend takeover when SSO is being used

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2024-36466

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...