Lucene search

[email protected]CVE-2022-46768

HistoryDec 15, 2022 - 7:15 a.m.

CVE-2022-46768

2022-12-1507:15:09

CWE-20

[email protected]

web.nvd.nist.gov

531

cve-2022-46768

arbitrary file read

zabbix

web service

report generation

nvd

security vulnerability

port 10053

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

JSON

Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files.

Affected configurations

NVD

Node

zabbixweb_service_report_generationRange6.0.0–6.0.11

zabbixweb_service_report_generationRange6.2.0–6.2.5

zabbixzabbix-agent2Range<6.0.12

zabbixzabbix-agent2Range6.2.0–6.2.6

CPENameOperatorVersion
zabbix:web_service_report_generationzabbix web service report generationle6.0.11
zabbix:web_service_report_generationzabbix web service report generationle6.2.5
zabbix:zabbix-agent2zabbix zabbix-agent2lt6.0.12
zabbix:zabbix-agent2zabbix zabbix-agent2lt6.2.6

CPE	Name	Operator	Version
zabbix:web_service_report_generation	zabbix web service report generation	le	6.0.11
zabbix:web_service_report_generation	zabbix web service report generation	le	6.2.5
zabbix:zabbix-agent2	zabbix zabbix-agent2	lt	6.0.12
zabbix:zabbix-agent2	zabbix zabbix-agent2	lt	6.2.6

CNA Affected

[
  {
    "vendor": "Zabbix",
    "product": "Web Service Report Generation",
    "versions": [
      {
        "version": "6.0.0-6.0.11",
        "status": "affected"
      },
      {
        "version": "6.2.0-6.2.5",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Zabbix",
    "product": "Zabbix agent 2 (MSI packages)",
    "versions": [
      {
        "version": "6.0.12rc1",
        "status": "unaffected",
        "lessThan": "unspecified",
        "versionType": "custom"
      },
      {
        "version": "6.2.6rc1",
        "status": "unaffected",
        "lessThan": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]