CVE-2022-23131

Name of the Vulnerable Software and Affected Versions Zabbix (affected versions not specified)

Description The issue is related to the SAML SSO authentication in Zabbix. When SAML SSO authentication is enabled, a malicious actor can modify session data because the user login stored in the session is not verified. This can allow an unauthenticated actor to escalate privileges and gain admin access to Zabbix Frontend. The attack requires SAML authentication to be enabled, and the actor must know the username of a Zabbix user or use the guest account, which is disabled by default.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.