CVE-2022-43515
published 2022-12-05CVE-2022-43515: Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it. In this way, any…
PriorityP357critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.21%
64.9th percentile
Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it. In this way, any user will not be able to access the Zabbix Frontend while it is being maintained and possible sensitive data will be prevented from being disclosed. An attacker can bypass this protection and access the instance using IP address not listed in the defined range.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | zabbix | < zabbix 1:6.0.13+dfsg-1 (bookworm) | zabbix 1:6.0.13+dfsg-1 (bookworm) |
| zabbix | frontend | — | — |
| zabbix | frontend | — | — |
| zabbix | frontend | — | — |
| zabbix | frontend | — | — |
| zabbix | frontend | — | — |
| zabbix | frontend | — | — |
| zabbix | frontend | — | — |
| zabbix | frontend | 4.0.0 – 4.0.44 | — |
| zabbix | frontend | 5.0.0 – 5.0.29 | — |
| zabbix | frontend | 6.0.0 – 6.0.9 | — |
| zabbix | frontend | 6.2.0 – 6.2.4 | — |
| zabbix | zabbix | >= 0 < 1:5.0.44+dfsg-1+deb11u1 | 1:5.0.44+dfsg-1+deb11u1 |
| zabbix | zabbix | >= 0 < 1:6.0.13+dfsg-1 | 1:6.0.13+dfsg-1 |
| zabbix | zabbix | >= 0 < 1:6.0.13+dfsg-1 | 1:6.0.13+dfsg-1 |
| zabbix | zabbix | >= 0 < 1:6.0.13+dfsg-1 | 1:6.0.13+dfsg-1 |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL
vendor_debian5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-43515: Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it
osv·2022-12-05·CVSS 9.8
CVE-2022-43515 [CRITICAL] CVE-2022-43515: Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it
Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it. In this way, any user will not be able to access the Zabbix Frontend while it is being maintained and possible sensitive data will be prevented from being disclosed. An attacker can bypass this protection and access the instance using IP address not listed in the defined range.
GHSA
GHSA-hh7f-cch9-52mr: Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it
ghsa_unreviewed·2022-12-05
CVE-2022-43515 [CRITICAL] CWE-20 GHSA-hh7f-cch9-52mr: Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it
Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it. In this way, any user will not be able to access the Zabbix Frontend while it is being maintained and possible sensitive data will be prevented from being disclosed. An attacker can bypass this protection and access the instance using IP address not listed in the defined range.
Debian
CVE-2022-43515: zabbix - Zabbix Frontend provides a feature that allows admins to maintain the installati...
vendor_debian·2022·CVSS 5.3
CVE-2022-43515 [MEDIUM] CVE-2022-43515: zabbix - Zabbix Frontend provides a feature that allows admins to maintain the installati...
Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it. In this way, any user will not be able to access the Zabbix Frontend while it is being maintained and possible sensitive data will be prevented from being disclosed. An attacker can bypass this protection and access the instance using IP address not listed in the defined range.
Scope: local
bookworm: resolved (fixed in 1:6.0.13+dfsg-1)
bullseye: resolved (fixed in 1:5.0.44+dfsg-1+deb11u1)
forky: resolved (fixed in 1:6.0.13+dfsg-1)
sid: resolved (fixed in 1:6.0.13+dfsg-1)
trixie: resolved (fixed in 1:6.0.13+dfsg-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-05
Published