CVE-2024-36464

Published Nov 27, 2024

Last updated 3 months ago

Overview

Description
When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords.
Source
security@zabbix.com
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
2.7
Impact score
1.4
Exploitability score
1.2
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Severity
LOW

Weaknesses

security@zabbix.com
CWE-256

Social media

Hype score
Not currently trending