What is CVE-2022-23134?

CVE-2022-23134 is a low-severity vulnerability in Zabbix Frontend, classified under Improper Access Control. CVSS score: 3.7/10. Published 2022-01-13.

How severe is CVE-2022-23134?

Low severity. CVSS v3 base score is 3.7 out of 10.

Is CVE-2022-23134 known to be exploited?

Yes. CVE-2022-23134 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2022-02-22), indicating it is being actively exploited. 12 public proof-of-concept repositories are indexed.

Vulnerability in Zabbix Frontend

CVE-2022-23134

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Fro…

EPSS: 0.926 (99.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Zabbix Frontend — versions 5.4.0 - 5.4.8, 5.4.9

Weakness classification (CWE)

CWE-284 — Improper Access Control

CISA KEV (Known Exploited Vulnerabilities)

This CVE is on the CISA KEV catalog, added on 2022-02-22. CISA KEV inclusion means CISA has confirmed in-the-wild exploitation; US federal agencies are required to remediate within a published due date.

BOD 22-01 due date: 2022-03-08.

Required action: Apply updates per vendor instructions.

Public proof-of-concept exploits

References

support.zabbix.com/browse/ZBX-20384 (x_refsource_MISC)
FEDORA-2022-dfe346f53f (vendor-advisory, x_refsource_FEDORA)
FEDORA-2022-1a667b0f90 (vendor-advisory, x_refsource_FEDORA)
[debian-lts-announce] 20220207 [SECURITY] [DLA 2914-1] zabbix security update (mailing-list, x_refsource_MLIST)

Frequently asked questions

What is CVE-2022-23134?: CVE-2022-23134 is a low-severity vulnerability in Zabbix Frontend, classified under Improper Access Control. CVSS score: 3.7/10. Published 2022-01-13.
How severe is CVE-2022-23134?: Low severity. CVSS v3 base score is 3.7 out of 10.
Is CVE-2022-23134 known to be exploited?: Yes. CVE-2022-23134 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2022-02-22), indicating it is being actively exploited. 12 public proof-of-concept repositories are indexed.