-
Problem report
-
Resolution: Fixed
-
Critical
-
None
-
None
-
S24-W22/23, S24-W24/25, S24-W26/27, S24-W28/29, S24-W30/31, S24-W32/33, S24-W34/35, S24-W36/37, S24-W38/39, S24-W40/41, S24-W42/43
-
1
When we have a proxy and a Zabbix agent using PSK encryption, we can bring down the Zabbix proxy connection from the Data Collection | Hosts configuration page simply by editing the PSK key. In all fairness this does require us to know the proxy PSK identity, but in all fairness a lot of customers use the name of the proxy as the PSK identity.
Steps to reproduce:
- Create encrypted proxy (identity: prox_psk) [PSK key: 123456]
- Create encrypted Zabbix agent (identity: prox_psk) [PSK key: 123456]
- Both proxy and agent will be connected correctly and sending data
- Change Zabbix agent PSK key in the Zabbix frontend (identity: prox_psk) [PSK key: 456789]
- Proxy connection goes down