CVE-2024-36460

HIGH EPSS 44.7%

Published Aug 12, 20241y ago · Modified Jun 17, 20261w ago

8.1 CVSS 3.1

High

Published Aug 12, 2024 1y ago

Last Modified Jun 17, 2026 1w ago

Description

The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text.

Base Score

8.1

Exploitability

2.8

Impact

5.2

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability None

EPSS Exploit Probability

44.7% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

CWE-256

CWE-522

Vendor	Product	Version	Range
zabbix	zabbix	*	≥5.0.0 – ≤5.0.42
zabbix	zabbix	*	≥6.0.0 – ≤6.0.30
zabbix	zabbix	*	≥6.4.0 – ≤6.4.15
zabbix	zabbix	7.0.0	any

lists.debian.org https://lists.debian.org/debian-lts-announce/2024/10/msg00000.html
support.zabbix.com https://support.zabbix.com/browse/ZBX-25017

Vendor Advisory

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.