CVEvulnerability

CVE-2024-22123

2.7 LOW Published 2024-08-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-08-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-94

Description

Setting SMS media allows to set GSM modem file. Later this file is used as Linux device. But due everything is a file for Linux, it is possible to set another file, e.g. log file and zabbix_server will try to communicate with it as modem. As a result, log file will be broken with AT commands and small part for log file content will be leaked to UI.

Affected configurations

• zabbix zabbix (>= 5.0.0 <= 5.0.42) • zabbix zabbix (>= 6.0.0 <= 6.0.30) • zabbix zabbix (>= 6.4.0 <= 6.4.15) • zabbix zabbix 7.0.0

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References