Skip to content

Zabbix 2

Organization

CVE-2022-23134: Zabbix Frontend Improper Access Control Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Feb 22, 2022

Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend.

Vulnerabilities & Patching

CVE-2022-23131: Zabbix Frontend Authentication Bypass Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Feb 22, 2022

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.

Vulnerabilities & Patching