CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-01-13
Zabbix Frontend setup.php Unauthenticated Configuration Bypass Vulnerability (CVE-2022-23134) Security Advisory
[Affected Scope] Zabbix Frontend versions 5.4.0 to 5.4.8, and 6.0.0-alpha1 to 6.0.0-beta1
[Impact] Unauthenticated remote attackers can bypass step verification in setup.php to access configuration stages and potentially alter the Zabbix Frontend database connection settings
[Mitigation] Immediately upgrade Zabbix Frontend to patched versions (5.4.9, 6.0.0-beta2 or later) and restrict external access to the setup.php file via web server configuration