Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-2450

no security measures are taken for external checks

    XMLWordPrintable

Details

    • Defect (Security)
    • Status: Closed
    • Critical
    • Resolution: Duplicate
    • 1.8.2
    • None
    • Server (S)
    • Team A
    • Sprint 50 (Mar 2019)

    Description

      We might wish to do more security checking for external checks, similar to what ZBX-790 and ZBX-1575 did for UserParameters. Currently, absolutely no security checks are performed. I have not tried, but this should work: non-existent.sh[ || rm -rf / ].

      Attachments

        Issue Links

          duplicates

          Problem report - Problem report ZBX-3647 keys of external checks do not conform to the item key syntax

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Problem report - Problem report ZBX-12963 Unable to pass $ sign to external check

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          is duplicated by

          Problem report - Problem report ZBX-12920 Context macros are not expanded properly when no value defined

          • Major - Major loss of function.
          • Closed

          Problem report - Problem report ZBX-9701 Special character $ doesn't pass in external check parameter

          • Trivial - Cosmetic problem like misspelt words or misaligned text.
          • Closed

          Activity

            People

              ak Andrejs Kozlovs
              asaveljevs Aleksandrs Saveljevs
              Votes:
              2 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: