-
Defect (Security)
-
Resolution: Fixed
-
Minor
-
2.2.24rc1, 3.0.27rc1, 4.0.6rc1, 4.2.0rc2
-
Sprint 50 (Mar 2019), Sprint 51 (Apr 2019)
-
0.25
Starting from version 3.0, Zabbix has login page without version number at page footer. That was done to avoid information leakage about potential vulnerabilities to unauthorized users.
Unfortunately, version number is included in jsLoader URL so unauthorized user can access it anyway.
- part of
-
ZBX-9522 Frontend messaging on dashboard doesn't follow refresh period configuration.
- Closed