Описание
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| zabbix | fixed | 1:7.0.29+dfsg-1 | package | |
| zabbix | ignored | trixie | package | |
| zabbix | ignored | bookworm | package |
Примечания
https://support.zabbix.com/browse/ZBX-28076
EPSS
Связанные уязвимости
(Zabbix API and Frontend login lockout mechanism has a flaw where sever ...)
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.
EPSS