CVE Vulnerability

CVE-2022-43515

Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it. In this way, any user will not be able to access the Zabbix Frontend while it is being maintained and possible sensitive data will be prevented from being disclosed. An attacker can bypass this protection and access the instance using IP address not listed in the defined range.

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://support.zabbix.com/browse/ZBX-22050 Exploit Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:zabbix:frontend:6.2.5:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:frontend:6.0.11:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:frontend:5.0.30:rc1:*:*:*:*:*:*
cpe:2.3:a:zabbix:frontend:*:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:frontend:*:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:frontend:*:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:frontend:*:*:*:*:*:*:*:*
Information

Published : 2022-12-05 07:15

Updated : 2023-02-03 09:23

NVD link : CVE-2022-43515

Mitre link : CVE-2022-43515

Products Affected
No products.
CWE
CWE-863