CVE-2025-27236 - Vulnerability Details - OpenCVE

A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to.

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

References

Link	Providers
https://support.zabbix.com/browse/ZBX-27060

History

Fri, 03 Oct 2025 11:45:00 +0000

Type	Values Removed	Values Added
Description		A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to.
Title		User information disclosure via api_jsonrpc.php on method user.get with param search
Weaknesses		CWE-863
References		https://support.zabbix.com/browse/ZBX-27060
Metrics		cvssV4_0 `{'score': 2.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}`

MITRE

Status: PUBLISHED

Assigner: Zabbix

Published: 2025-10-03T11:28:09.810Z

Updated: 2025-10-03T11:28:09.810Z

Reserved: 2025-02-20T11:40:38.480Z

Link: CVE-2025-27236

Vulnrichment

No data.

NVD

Status : Received

Published: 2025-10-03T12:15:43.790

Modified: 2025-10-03T12:15:43.790

Link: CVE-2025-27236

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-27236", "assignerOrgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "state": "PUBLISHED", "assignerShortName": "Zabbix", "dateReserved": "2025-02-20T11:40:38.480Z", "datePublished": "2025-10-03T11:28:09.810Z", "dateUpdated": "2025-10-03T11:28:09.810Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "modules": ["Frontend"], "product": "Zabbix", "repo": "https://git.zabbix.com/", "vendor": "Zabbix", "versions": [{"changes": [{"at": "6.0.41", "status": "unaffected"}], "lessThanOrEqual": "6.0.40", "status": "affected", "version": "6.0.38", "versionType": "git"}, {"changes": [{"at": "7.0.17", "status": "unaffected"}], "lessThanOrEqual": "7.0.16", "status": "affected", "version": "7.0.9", "versionType": "git"}, {"changes": [{"at": "7.2.11", "status": "unaffected"}], "lessThanOrEqual": "7.2.10", "status": "affected", "version": "7.2.3", "versionType": "git"}, {"changes": [{"at": "7.4.1", "status": "unaffected"}], "lessThan": "7.4.1", "status": "affected", "version": "7.4.0", "versionType": "git"}]}], "configurations": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>An authenticated, regular Zabbix user could data-mine some field values on other users in their group.</p>"}], "value": "An authenticated, regular Zabbix user could data-mine some field values on other users in their group."}], "credits": [{"lang": "en", "type": "reporter", "value": "Zabbix wants to thank yannapostrophe and exod for submitting this report on the HackerOne bug bounty platform."}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to.</p>"}], "value": "A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to."}], "impacts": [{"capecId": "CAPEC-116", "descriptions": [{"lang": "en", "value": "CAPEC-116: Excavation"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "ADJACENT", "baseScore": 2.1, "baseSeverity": "LOW", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-863", "description": "CWE-863: Incorrect Authorization", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "shortName": "Zabbix", "dateUpdated": "2025-10-03T11:28:09.810Z"}, "references": [{"url": "https://support.zabbix.com/browse/ZBX-27060"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Update the affected components to their respective fixed versions.</p>"}], "value": "Update the affected components to their respective fixed versions."}], "source": {"discovery": "EXTERNAL"}, "title": "User information disclosure via api_jsonrpc.php on method user.get with param search", "x_generator": {"engine": "Vulnogram 0.2.0"}}}}