CVE-2025-27238 - CERT CVE

  1. CVE-2025-27238

ID CVE-2025-27238
Sažetak Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them.
Reference
CVSS
Base: 3.5
Impact: 1.4
Exploitability:2.1
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK LOW LOW
Impact
PovjerljivostCjelovitostDostupnost
LOW NONE NONE
CVSS vektor CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Zadnje važnije ažuriranje 08-10-2025 - 14:53
Objavljeno 12-09-2025 - 11:15