Описание
The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| zabbix | fixed | 1:7.0.29+dfsg-1 | package | |
| zabbix | no-dsa | trixie | package | |
| zabbix | postponed | bookworm | package |
Примечания
https://support.zabbix.com/browse/ZBX-28074
EPSS
Связанные уязвимости
The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity.
The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity.
The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity.
ALT-PU-2026-15153: package `zabbix` update to version 7.0.28-alt0.p10.1
ALT-PU-2026-15148: package `zabbix` update to version 7.0.28-alt0.p11.1
EPSS