PT-2023-8860

CVE-2023-32723

Published

2023-10-12

Updated

2024-03-29

Description by

CVSS 2.0

9.4

Critical

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Zabbix (affected versions not specified)

Description The issue is related to incorrect permission assignment for a critical resource in the Zabbix universal monitoring system agent. This can allow a remote attacker to execute arbitrary code. A request to LDAP is sent before user permissions are checked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Maris Melnikovs

Xiaojunjie

Vendors

Affected products

Weakness enumeration

CWE-732: Incorrect Permission Assignment for Critical Resource

Related identifiers

CVE-2023-32723

BDU:2024-02419