-
Defect (Security)
-
Resolution: Fixed
-
Trivial
-
2.0.2, 4.0.22, 5.0.2
-
Sprint 66 (Jul 2020), Sprint 67 (Aug 2020), Sprint 68 (Sep 2020), Sprint 69 (Oct 2020), Sprint 70 (Nov 2020)
-
0.75
Hi,
I've just found minor security vulnerability:
When you try to login to zabbix with incorrect password several time you'll soon get 'Account is blocked for XX seconds' message.
However when you try this with non-existant account you receive no such kind of message.
Thus you can check if the account with specified mail exists in the system.