CVE-2019-17382
CRITICAL NUCLEIZabbix < 4.4 - Unauthenticated Authorization Bypass via Dashboard View Action
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2019-17382. PoCs published by Milad Khoshdel, K3ysTr0K3R. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in Zabbix versions 2.x, 3.x, and 4.x by directly accessing the dashboard page via a crafted GET request. The server responds with a 200 OK and loads the dashboard content without requiring authentication.
Description
An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password (i.e., anonymously). All created elements (Dashboard/Report/Screen/Map) are accessible by other users and by an admin.
Exploits (2)
This exploit demonstrates an authentication bypass vulnerability in Zabbix versions 2.x, 3.x, and 4.x by directly accessing the dashboard page via a crafted GET request. The server responds with a 200 OK and loads the dashboard content without requiring authentication.
This repository contains a Python script that scans for CVE-2019-17382, an authentication bypass vulnerability in Zabbix versions up to 4.4. It checks for the presence of the vulnerable endpoint and confirms bypass by detecting the 'Dashboard' string in the response.
Nuclei Templates (1)
http.favicon.hash:892542951 || http.title:"zabbix-server" || cpe:"cpe:2.3:a:zabbix:zabbix"
icon_hash=892542951 || app="zabbix-监控系统" && body="saml" || title="zabbix-server"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N