PT-2023-8860

CVE-2023-32723

Publicado

2023-10-12

Atualizado

2024-03-29

Descrição por

CVSS 2.0

9.4

Crítica

MétricasAV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Zabbix (affected versions not specified)

Description The issue is related to incorrect permission assignment for a critical resource in the Zabbix universal monitoring system agent. This can allow a remote attacker to execute arbitrary code. A request to LDAP is sent before user permissions are checked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impactos

Pesquisadores

Maris Melnikovs

Xiaojunjie

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-732: Incorrect Permission Assignment for Critical Resource

Identificadores relacionados

CVE-2023-32723

BDU:2024-02419