CVE-2024-22116

CVSS V2 None CVSS V3 None

Description

An administrator with restricted permissions can exploit the script execution functionality within the Monitoring Hosts section. The lack of default escaping for script parameters enabled this user ability to execute arbitrary code via the Ping script, thereby compromising infrastructure.

Overview

CVE ID
CVE-2024-22116

Assigner
Zabbix

Vulnerability Status
PUBLISHED

Published Version
2024-08-09T10:16:34.982Z

Last Modified Date
2024-08-09T13:36:39.750Z

Weakness Enumerations

CWE	URL
CWE-94	http://cwe.mitre.org/data/definitions/94.html

References

Reference URL	Reference Tags
https://support.zabbix.com/browse/ZBX-25016

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-22116
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22116

History

Created	Old Value	New Value	Data Type	Notes
2024-08-10 13:09:58				Added to TrackCVE