CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Zabbix Frontend setup.php Unauthenticated Configuration Bypass Vulnerability (CVE-2022-23134) Security Advisory
[Affected Scope] Zabbix Frontend versions 5.4.0 to 5.4.8, and 6.0.0-alpha1 to 6.0.0-beta1
[Impact] Unauthenticated remote attackers can bypass step verification in setup.php to access configuration stages and potentially alter the Zabbix Frontend database connection settings
[Mitigation] Immediately upgrade Zabbix Frontend to patched versions (5.4.9, 6.0.0-beta2 or later) and restrict external access to the setup.php file via web server configuration
Zabbix Frontend SAML SSO Session Bypass and Privilege Escalation Vulnerability (CVE-2022-23131)
[Affected Scope] Zabbix Frontend versions 4.0.36, 5.0.18, 5.4.8, 6.0.0-alpha7 and below with SAML SSO enabled
[Impact] Unauthenticated remote attackers can modify session data to bypass authentication, escalating privileges to gain full administrative access
[Mitigation] Immediately upgrade Zabbix Frontend to patched versions (4.0.37, 5.0.19, 5.4.9, 6.0.0-beta1 or later) or disable SAML authentication