Bug 2328963 (CVE-2024-22117) - CVE-2024-22117 zabbix: Value of sysmap_element_url can be de-synchronized causing the map element to crash when new URLs is added
Summary: CVE-2024-22117 zabbix: Value of sysmap_element_url can be de-synchronized cau...
Keywords:
Status: NEW
Alias: CVE-2024-22117
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2328999
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-11-26 15:01 UTC by OSIDB Bzimport
Modified: 2024-11-26 17:27 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2024-11-26 15:01:35 UTC
When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element.


Note You need to log in before you can comment on or make changes to this bug.