Описание
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.
Ссылки
Уязвимые конфигурации
Конфигурация 1Версия до 1.8.19 (включая)
Одно из
cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8.1:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8.2:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8.3:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8.3:rc2:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8.3:rc3:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8.15:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8.16:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:1.8.18:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:rc2:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:rc3:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:rc4:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:rc5:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.0:rc6:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.1:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.1:rc2:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.2:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.2:rc2:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.3:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.3:rc2:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.4:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.5:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.6:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.7:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.8:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.8:rc2:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.9:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.9:rc2:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.0.10:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.2.0:-:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.2.0:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.2.0:rc2:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.2.1:-:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix:2.2.1:rc1:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*
EPSS
Процентиль: 48%
0.00252
Низкий
4 Medium
CVSS2
Дефекты
CWE-287
Связанные уязвимости
ubuntu
больше 11 лет назад
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.
debian
больше 11 лет назад
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x ...
github
больше 3 лет назад
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.
EPSS
Процентиль: 48%
0.00252
Низкий
4 Medium
CVSS2
Дефекты
CWE-287