CVE-2024-42325CWE-359

Excessive information returned by user.get

Low · published April 2, 2025

CVSS v4.0
2.1
EPSS
0%
Percentile
20.9
In the wild
Unconfirmed
What it is

Zabbix API user.get returns all users that share common group with the calling user. This includes media and other information, such as login attempts, etc.

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00294 · 20.9th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2025-04-02T06:12Z
EPSS history
Timeline
  • 02 APR 06:12Z
    Excessive information returned by user.get
    cvelistv5