target entity

Zabbix

2 source-linked records in the current knowledge graph.

Feb 22, 2022high

CVE-2022-23131: Zabbix Frontend Authentication Bypass Vulnerability

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML. Required action: Apply updates per vendor instructions.

CVE-2022-23131EPSS 95.7%FrontendZabbix

CISA KEV ↗ · unattributed attribution

Feb 22, 2022high

CVE-2022-23134: Zabbix Frontend Improper Access Control Vulnerability

Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend. Required action: Apply updates per vendor instructions.

CVE-2022-23134EPSS 84.7%FrontendZabbix

CISA KEV ↗ · unattributed attribution