Skip to content
OpenAdvisories

Package · Debian

zabbix

128 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2022-23134 Exploited Public exploit EPSS 95%

    Possible view of the setup pages by unauthenticated users if config file already exists

    After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

    Zabbix Frontend zabbix Debian
    KEV Feb 22, 2022