PT-2021-3699 · Zabbix · Zabbix

Published

2021-07-23

·

Updated

2021-07-23

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Zabbix (affected versions not specified)
Description The issue is related to insufficient access control in the Zabbix monitoring system. It can be exploited by a remote attacker to bypass the admin panel's authentication form by sending specially crafted requests.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2021-03936

Affected Products

Zabbix