← Retour aux CVEs
CVE-2025-27238
LOW3.5
Description
Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them.
Details CVE
Score CVSS v3.13.5
SeveriteLOW
Vecteur CVSSCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vecteur d'attaqueADJACENT_NETWORK
ComplexiteLOW
Privileges requisLOW
Interaction utilisateurNONE
Publie9/12/2025
Derniere modification10/8/2025
Sourcenvd
Observations honeypot0
Produits affectes
zabbix:zabbix
Faiblesses (CWE)
CWE-284
References
https://support.zabbix.com/browse/ZBX-26988(security@zabbix.com)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.