by Kastro
Paper/Archive/CVE-2022-43515

CVE-2022-43515

Zabbix Frontend — X-Forwarded-For header is active by default causes access to Zabbix sites in maintenance mode

EPSS 1%public exploitCVSS 9.8
critical.is priorityof 100
53
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 69.7.697 × 2013.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it. In this way, any user will not be able to access the Zabbix Frontend while it is being maintained and possible sensitive data will be prevented from being disclosed. An attacker can bypass this protection and access the instance using IP address not listed in the defined range.

Affected

ProductAffectedFixed inSource
Frontend4.0.0-4.0.44–CNA
Frontend5.0.0-5.0.295.0.30rc1CNA
Frontend6.0.0-6.0.96.0.11rc1CNA
Frontend6.2.0-6.2.46.0.11rc1CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Zabbix (CNA)5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refsupport.zabbix.com/browse/ZBX-22050reflists.debian.org/debian-lts-announce/2023/08/msg00027.htmlreflists.debian.org/debian-lts-announce/2024/10/msg00000.html