Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-2450

no security measures are taken for external checks

    Details

    • Type: Incident report
    • Status: Closed
    • Priority: Critical
    • Resolution: Duplicate
    • Affects Version/s: 1.8.2
    • Fix Version/s: None
    • Component/s: Server (S)
    • Team:
      Team A
    • Sprint:
      Sprint 50 (Mar 2019)

      Description

      We might wish to do more security checking for external checks, similar to what ZBX-790 and ZBX-1575 did for UserParameters. Currently, absolutely no security checks are performed. I have not tried, but this should work: non-existent.sh[ || rm -rf / ].

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                ak Andrejs Kozlovs
                Reporter:
                asaveljevs Aleksandrs Saveljevs
              • Votes:
                2 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: