DEBIAN-CVE-2024-36466

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

The vulnerability of the zbx_session cookie file in the Zabbix monitoring system allows a hacker to increase their privileges.

The vulnerability of the zbxsession cookie file in the Zabbix monitoring system is related to incorrect processing of security prefixes in cookie file names. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...