CVE Vulnerabilities

CVE-2024-36463

Access to Critical Private Variable via Public Method

Published: Nov 26, 2024 | Modified: Nov 26, 2024

CVSS 3.x

N/A

Source:

NVD

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

MEDIUM

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-36463
CWE	https://cwe.mitre.org/data/definitions/767.html

The implementation of atob in Zabbix JS allows to create a string with arbitrary content and use it to access internal properties of objects.

Weakness

The product defines a public method that reads or modifies a private variable.

Affected Software

Name	Vendor	Start Version	End Version
Zabbix	Ubuntu	trusty/esm	*
Zabbix	Ubuntu	upstream	*

Potential Mitigations

References

https://support.zabbix.com/browse/ZBX-25611

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.