CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-01-13
Zabbix Frontend SAML SSO Session Bypass and Privilege Escalation Vulnerability (CVE-2022-23131)
[Affected Scope] Zabbix Frontend versions 4.0.36, 5.0.18, 5.4.8, 6.0.0-alpha7 and below with SAML SSO enabled
[Impact] Unauthenticated remote attackers can modify session data to bypass authentication, escalating privileges to gain full administrative access
[Mitigation] Immediately upgrade Zabbix Frontend to patched versions (4.0.37, 5.0.19, 5.4.9, 6.0.0-beta1 or later) or disable SAML authentication