Boletines de Vulnerabilidades

CVE-2022-23134

   
Software afectado ZABBIX
 
After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2022-23134