PT-2014-4292 · Zabbix+1 · Zabbix+1

Corey Shaw · Published 2014-02-13 · Updated 2014-05-09 · CVE-2014-1685

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Zabbix versions prior to 1.8.20rc2 Zabbix versions 2.0.x prior to 2.0.11rc2 Zabbix versions 2.2.x prior to 2.2.2rc1

Description The issue allows remote "Zabbix Admin" users to modify the media of arbitrary users.

Recommendations For versions prior to 1.8.20rc2, update to version 1.8.20rc2 or later. For versions 2.0.x prior to 2.0.11rc2, update to version 2.0.11rc2 or later. For versions 2.2.x prior to 2.2.2rc1, update to version 2.2.2rc1 or later.

Fix

Related Identifiers

ALT-PU-2014-1190

CVE-2014-1685

MGASA-2014-0095

Affected Products

Alt Linux

Zabbix

References · 21

• https://nvd.nist.gov/vuln/detail/CVE-2014-1685 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1685 · Security Note
• https://cve.org/CVERecord?id=CVE-2014-1685 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132376.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2014-0095 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2014-1685 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1682 · Security Note
• https://ubuntu.com/security/CVE-2014-1685 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0095.html · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-1685 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132377.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-1685 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2014-1685 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-1190 · Vendor Advisory
• https://support.zabbix.com/browse/ZBX-7693 · Note