Details
-
Incident report
-
Resolution: Fixed
-
Major
-
None
-
2.0.20
-
None
-
Zabbix 2.4
-
Team C
-
Sprint 4, Sprint 5
-
0
Description
These vulnerabilities were discovered by Lilith Wyatt, Cisco Systems.
Findings are related to Zabbix version 2.4.
If reproducible on current version please fix.
Patch for 2.4 version is out of scope.
Attachments
1.
|
Bug 1. Zabbix Server Remote Code Execution ( CVSS: 10, SIR: Critical ) |
|
Closed | Unassigned |
2.
|
Bug 2. Active Zabbix Proxy MITM Database Overwrite (CVSS 6.8: SIR: High) |
|
Closed | Unassigned |