cbcvebase.
CVE-2024-36460
published 2024-08-12

CVE-2024-36460: The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text.

PriorityP342high8.1CVSS 3.1
AVNACLPRLUINSUCHIHAN
EPSS
0.61%
45.5th percentile
The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text.

Affected

10 ranges
VendorProductVersion rangeFixed in
debianzabbix< zabbix 1:5.0.44+dfsg-1+deb11u1 (bullseye)zabbix 1:5.0.44+dfsg-1+deb11u1 (bullseye)
zabbixzabbix——
zabbixzabbix>= 0 < 1:5.0.44+dfsg-1+deb11u11:5.0.44+dfsg-1+deb11u1
zabbixzabbix>= 0 < 1:7.0.1+dfsg-11:7.0.1+dfsg-1
zabbixzabbix>= 0 < 1:7.0.1+dfsg-11:7.0.1+dfsg-1
zabbixzabbix5,0,0 – 5.0.42—
zabbixzabbix5.0.0 – 5.0.42—
zabbixzabbix6.0.0 – 6.0.30—
zabbixzabbix6.4.0 – 6.4.15—
zabbixzabbix7.0.0alpha1 – 7.0.0rc2—

CVSS provenance

nvdv3.18.1HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
osv8.1HIGH
vendor_debian8.1HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.