Description
Zabbix SIA Zabbix是拉脱维亚Zabbix SIA公司的一套开源的监控系统。Zabbix 4.4及之前版本中的zabbix.php?action=dashboard.view&dashboardid=1存在授权问题漏洞。该漏洞源于网络系统或产品中缺少身份验证措施或身份验证强度不足。
Zabbix 存在未授权访问
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/taoqinggang/articles/18026826
https://www.ctfiot.com/27130.html
https://blog.csdn.net/qq_41567985/article/details/133360201
https://www.ddpoc.com/DVB-2022-3540.html
https://cn-sec.com/archives/1233236.html
https://www.163.com/dy/article/JIGPPBGU0511A5GF.html
https://cloud.tencent.com/developer/article/2085260
https://www.geekby.site/2022/03/zabbix%E6%BC%8F%E6%B4%9E%E6%B7%B1%E5%85%A5%E5%88%A9%E7%94%A8/
https://github.com/hsltz/zabbix_gui_scanner