Zabbix Vulnerabilities and Affected Products
Vulnerabilities associated with Proxy, Server.
Products
Clear product- Zabbix68 vulnerabilities
- Frontend12 vulnerabilities
- Zabbix agent 2 (MSI packages)2 vulnerabilities
- Proxy, Server1 vulnerability
- Web Service Report Generation1 vulnerability
- Zabbix agent (MSI packages)1 vulnerability
- Zabbix Server1 vulnerability
- zabbix-agent21 vulnerability
- zabbix_server1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
Incorrect permissions of [/var/run/zabbix] forces dac_overrideDuring Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level | CVSS3.3v3.1 | EPSS0.796% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |