zabbix Proxy, Server vulnerabilities

Latest zabbix Proxy, Server CVEs

Newest publication first

1. CVE-2022-23132 Incorrect permissions of [/var/run/zabbix] forces dac_override

   Published 2022-01-13

   High·CVSS 7.3 EPSS 0.86%

   During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.