Описание
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| zabbix | fixed | 1:7.0.29+dfsg-1 | package | |
| zabbix | ignored | trixie | package | |
| zabbix | ignored | bookworm | package |
Примечания
https://support.zabbix.com/browse/ZBX-28076
EPSS
Связанные уязвимости
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.
ALT-PU-2026-16525: package `zabbix` update to version 7.0.31-alt0.p10.1
ALT-PU-2026-16196: package `zabbix` update to version 7.0.31-alt0.p11.1
EPSS