Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4g73-3mxf-j47w

Опубликовано: 14 янв. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user (or use the guest account, which is disabled by default).

In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user (or use the guest account, which is disabled by default).

EPSS

Процентиль: 100%
0.94301
Критический

9.8 Critical

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 9.1
ubuntu
около 4 лет назад

In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user (or use the guest account, which is disabled by default).

CVSS3: 9.1
nvd
около 4 лет назад

In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user (or use the guest account, which is disabled by default).

CVSS3: 9.1
debian
около 4 лет назад

In the case of instances where the SAML SSO authentication is enabled ...

CVSS3: 9.8
fstec
около 4 лет назад

Уязвимость универсальной системы мониторинга Zabbix , связанная с обходом аутентификации посредством спуфинга, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 100%
0.94301
Критический

9.8 Critical

CVSS3

Дефекты

CWE-290