CVE-2022-23134

Zabbix Frontend Improper Access Control Vulnerability

Zabbix

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

13. Jan 2022

Ausgewertete Quellen

• Debian
  https://lists.debian.org/debian-lts-announce/2022/02/msg00008.html
• Hersteller
  https://support.zabbix.com/browse/ZBX-20384
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23134
• CISA
  Zabbix Frontend Improper Access Control Vulnerability
• NVD
  CVE-2022-23134