CVE-2017-2825

Name of the Vulnerable Software and Affected Versions: Zabbix Server versions 2.4.x

Description: The issue allows specifically crafted trapper packets to bypass database logic checks, resulting in unauthorized database writes. This can be exploited by setting up a Man-in-the-Middle server to alter trapper requests between an active Zabbix proxy and Server.

Recommendations: For Zabbix Server versions 2.4.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.