Description
zabbix 是一个基于WEB界面的提供分布式系统监视以及网络监视功能的企业级的开源解决方案。CVE-2022-23131 中，若zabbix 开启了SAML SSO 单点登录认证功能，则攻击者可构造恶意的请求从而通过认证，以Admin身份进入Zabbix控制台，造成敏感信息泄漏，或者远程命令执行。
Zabbix SAML SSO /index_sso.php 登录绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.csdn.net/qq_32261191/article/details/123142820
https://stack.chaitin.com/vuldb/detail/20d16d0f-4963-4c76-aa26-1ce5189a1ce9
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/middleware/Zabbix-SAML%E8%BA%AB%E4%BB%BD%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E-CVE-2022-23131.md
https://developer.aliyun.com/article/918185
https://y4er.com/posts/cve-2022-23131-zabbix-web-frontend-bypassing-the-saml-sso-authentication/
https://www.cnblogs.com/cn-gov/p/15954839.html
https://cloud.tencent.com/developer/article/2023497
https://jiwo.org/ken/detail.php?id=3089
https://zone.huoxian.cn/d/936-cve-2022-23131-zabbix
https://zhuanlan.zhihu.com/p/469274954
https://nvd.nist.gov/vuln/detail/CVE-2022-23131
https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage
https://pentest-tools.com/vulnerabilities-exploits/zabbix-saml-sso-authentication-bypass_2366