PT-2014-4292 · Zabbix+1 · Zabbix+1

Corey Shaw · Publicado 2014-02-13 · Atualizado 2014-05-09 · CVE-2014-1685

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zabbix versions prior to 1.8.20rc2 Zabbix versions 2.0.x prior to 2.0.11rc2 Zabbix versions 2.2.x prior to 2.2.2rc1

Description The issue allows remote "Zabbix Admin" users to modify the media of arbitrary users.

Recommendations For versions prior to 1.8.20rc2, update to version 1.8.20rc2 or later. For versions 2.0.x prior to 2.0.11rc2, update to version 2.0.11rc2 or later. For versions 2.2.x prior to 2.2.2rc1, update to version 2.2.2rc1 or later.

Correção

Identificadores relacionados

ALT-PU-2014-1190

CVE-2014-1685

MGASA-2014-0095

Produtos afetados

Alt Linux

Zabbix

Referências · 21

• https://support.zabbix.com/browse/ZBX-7693 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-1685 · Nota de Segurança
• http://zabbix.com/rn2.0.11.php · Nota
• https://bugs.mageia.org/show_bug.cgi?id=12574 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1685 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2014-1685 · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132376.html · Aviso do Fabricante
• https://support.zabbix.com/browse/ZBX-7703 · Nota
• https://osv.dev/vulnerability/MGASA-2014-0095 · Aviso do Fabricante
• https://packages.altlinux.org/ru/vuln/CVE-2014-1685 · Nota
• https://osv.dev/vulnerability/CVE-2014-1685 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1682 · Nota de Segurança
• https://ubuntu.com/security/CVE-2014-1685 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2014-0095.html · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-1685 · Aviso do Fabricante