Описание
Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| zabbix | fixed | 1:7.0.9+dfsg-1 | package | |
| zabbix | ignored | bookworm | package |
Примечания
https://support.zabbix.com/browse/ZBX-26255
Fixed by (merge commit): https://github.com/zabbix/zabbix/commit/5193aba71cd6db8f0d7e53f88eb6e6e5b7c88102 (7.0.9rc1)
Fixed by (merge commit): https://github.com/zabbix/zabbix/commit/4735c3bac34036fd70c57b5f057da0e27c9cb2b4 (6.0.38rc1)
Fixed by (merge commit): https://github.com/zabbix/zabbix/commit/6c5186ae53db12dcd0426ef85c147d4a83a9cca4 (5.0.46rc1)
EPSS
Связанные уязвимости
Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one.
Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one.
Execution time for an unsuccessful login differs when using a non-existing username compared to using an existing one.
Уязвимость сервера универсальной системы мониторинга Zabbix, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
EPSS