Boletines de Vulnerabilidades

CVE-2025-27236

   
Software afectado ZABBIX
 
A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-27236