CVE-2022-23134
Zabbix Frontend Improper Access Control Vulnerability
Published Jan 13, 2022 · updated Jun 16, 2026 · zabbix zabbix
After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.
Timeline
Detection, updates, and resolution for this record.
Jan 13, 2022 · Catalog
Detected
After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.
Feb 22, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Mar 8, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.
Required action
Apply updates per vendor instructions.
CISA due date Mar 8, 2022
Affected
- cpe debian/debian linux9.0
- cpe fedoraproject/fedora34
- cpe zabbix/zabbixversion unspecified
- cpe zabbix/zabbix6.0.0
- vendor Zabbix Frontendversion unspecified
Sources
- CISA KEVCVE-2022-23134
Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend.
cisa.gov - CVE.orgCVE-2022-23134
Official CVE identifier
cve.org - FIRST EPSSCVE-2022-23134
30-day exploitation probability 95.3%
first.org - NIST NVDCVE-2022-23134
After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.
nvd.nist.gov