CVE-2022-23134
Possible view of the setup pages by unauthenticated users if config file already exists
KEVMEDIUM 5.3EPSS 95.3%
After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.
- Affected
- Zabbix · Frontend
- CVSS v3.1 NVD
- 5.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - CVSS v3.1 ZABBIX
- 3.7 LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N - CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N - EPSS
- 95.26% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2022-02-22
- Nuclei
- medium
- Published
- 2022-01-13
- Updated
- 2025-10-21
Proof-of-concept exploits (1)
- TheN00bBuilder/cve-2022-23134-poc-and-writeup1★ · 2025-03-23
Nuclei templates (1)
Exploit collections (1)
- CVE-2022-23134.yamlzan8in/afrog
Security advisories
- https://support.zabbix.com/browse/ZBX-20384
- https://lists.debian.org/debian-lts-announce/2022/02/msg00008.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/…
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/…