Lucene search
GoogleOSV:CVE-2022-23134HistoryJan 13, 2022 - 4:15 p.m.
CVE-2022-23134
2022-01-1316:15:08
Google
osv.dev
17
initial setup
unauthenticated access
security risk
zabbix frontend
configuration
After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.
References
lists.debian.org/debian-lts-announce/2022/02/msg00008.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6SZYHXINBKCY42ITFSNCYE7KCSF33VRA/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VB6W556GVXOKUYTASTDGL3AI7S3SJHX7/
support.zabbix.com/browse/ZBX-20384
Related
openvas
openvas
Debian: Security Advisory (DLA-2914-1)
2022-02-08 00:00:00
Fedora: Security Advisory for zabbix (FEDORA-2022-1a667b0f90)
2022-01-23 00:00:00
openSUSE: Security Advisory for zabbix (openSUSE-SU-2022:0036-1)
2022-02-18 00:00:00
cvelist
cvelist
alpinelinux
alpinelinux
CVE-2022-23134
2022-01-13 16:15:00
attackerkb
attackerkb
CVE-2022-23134
2021-12-20 00:00:00
osv
osv
zabbix - security update
2022-02-07 00:00:00
debiancve
debiancve
CVE-2022-23134
2022-01-13 16:15:08
debian
debian
[SECURITY] [DLA 2914-1] zabbix security update
2022-02-07 21:48:51
checkpoint_advisories
checkpoint_advisories
Zabbix Web Frontend Authentication Bypass (CVE-2022-23134)
2022-03-02 00:00:00
prion
prion
Design/Logic Flaw
2022-01-13 16:15:00
ubuntucve
ubuntucve
CVE-2022-23134
2022-01-13 00:00:00
nuclei
nuclei
Zabbix Setup Configuration Authentication Bypass
2022-02-25 16:00:40
cve
cve
CVE-2022-23134
2022-01-13 16:15:08
nessus
nessus
Debian DLA-2914-1 : zabbix - LTS security update
2022-02-07 00:00:00
openSUSE 15 Security Update : zabbix (openSUSE-SU-2022:0036-1)
2022-02-17 00:00:00
Zabbix 5.4.x < 5.4.9 Multiple Vulnerabilities
2022-02-28 00:00:00
cisa_kev
cisa_kev
Zabbix Frontend Improper Access Control Vulnerability
2022-02-22 00:00:00
nvd
nvd
CVE-2022-23134
2022-01-13 16:15:08
cisa
cisa
CISA Adds Two Known Exploited Vulnerabilities to Catalog
2022-02-22 00:00:00
hivepro
hivepro
Zabbix affected by two actively exploited vulnerabilities
2022-02-24 10:27:48
thn
thn
fedora
fedora
[SECURITY] Fedora 35 Update: zabbix-5.0.19-1.fc35
2022-01-23 01:44:38
[SECURITY] Fedora 34 Update: zabbix-5.0.19-1.fc34
2022-01-23 01:08:21
sonarsource
sonarsource
Zabbix - A Case Study of Unsafe Session Storage
2022-02-16 00:00:00
suse
suse
Security update for zabbix (moderate)
2022-02-16 00:00:00
Security update for MozillaThunderbird (important)
2022-03-01 00:00:00