PT-2018-7199
CVE-2017-2825
·
تاريخ النشر
2016-02-16
·
تاريخ التحديث
2022-06-15
الوصف من
CVSS 3.1
7.0
عاليةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L
Name of the Vulnerable Software and Affected Versions:
Zabbix Server versions 2.4.x
Description:
The issue allows specifically crafted trapper packets to bypass database logic checks, resulting in unauthorized database writes. This can be exploited by setting up a Man-in-the-Middle server to alter trapper requests between an active Zabbix proxy and Server.
Recommendations:
For Zabbix Server versions 2.4.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾