CVE-2024-36466: Unauthenticated Zabbix frontend takeover when SSO is being used
Published Nov 28, 2024
·Updated
A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions.
Affected Software
3 affected components
Zabbix Zabbix>=6.0.0<6.0.32
Zabbix Zabbix>=6.4.0<6.4.17
Zabbix Zabbix=7.0.0
Event History
Nov 28, 2024
CVE Published
via MITRE·07:19 AM
Data Sourced
via MITRE·07:19 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-36466?
CVE-2024-36466 has been rated as critical because it allows unauthorized admin access through forged session cookies.
2
How do I fix CVE-2024-36466?
To mitigate CVE-2024-36466, upgrade Zabbix to a version later than 6.0.32, 6.4.17, or 7.0.0.
3
Which versions of Zabbix are affected by CVE-2024-36466?
CVE-2024-36466 affects Zabbix versions 6.0.0 to 6.0.32, 6.4.0 to 6.4.17, and version 7.0.0.
4
What are the potential impacts of CVE-2024-36466?
Exploitation of CVE-2024-36466 may allow attackers to gain administrative privileges, compromising system security.
5
Is there a workaround for CVE-2024-36466 if I cannot upgrade?
Currently, there is no known workaround for CVE-2024-36466, and upgrading is the recommended action.