Security Advisory

CVE-2025-27236

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-03 11:28:09

Last updated 2025-10-03 13:52:36

Assigner Zabbix

State PUBLISHED

Description

A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to.

← Browse all CVEs View on cve.org ↗