漏洞描述 Zabbix是Zabbix公司的一套开源的监控系统。 Zabbix存在安全漏洞,该漏洞源于Proxy, Server组件存在安全漏洞,允许有权访问单个项目配置的攻击者通过远程代码执行来破整个基础结构。受影响的产品和版本:Zabbix 5.0.0 - 5.0.36版本,5.0.37rc1版本,6.0.0 - 6.0.20版本,6.0.21rc1版本,6.4.0 - 6.4.5版本。
相关漏洞推荐 Zabbix /api_jsonrpc.php SQL 注入漏洞(CVE-2024-36465) POC CVE-2024-22120: Zabbix Server - Time-Based Blind SQL injection POC CVE-2016-10134: Zabbix - SQL Injection POC CVE-2019-17382: Zabbix <=4.4 - Authentication Bypass POC CVE-2022-23131: Zabbix - SAML SSO Authentication Bypass POC CVE-2022-23134: Zabbix Setup Configuration Authentication Bypass POC CVE-2022-26148: Grafana & Zabbix Integration - Credentials Disclosure POC CVE-2016-10134: Zabbix SQL Injection Vulnerability POC CVE-2022-23131: Zabbix - SAML SSO Authentication Bypass POC CVE-2022-23134: Zabbix Setup Configuration Authentication Bypass POC CVE-2022-26148: Grafana & Zabbix Integration - Credentials Disclosure POC zabbix-default-password: Zabbix Default Password POC zabbix-authentication-bypass: Zabbix authentication Bypass