CVE-2017-2826
CVE-2017-2826
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted iConfig proxy request can cause the Zabbix server to send the configuration information of any Zabbix proxy, resulting in information disclosure. An attacker can make requests from an active Zabbix proxy to trigger this vulnerability.
CVSS 3.7 · Low · EPSS 3.3% · Fix available
- Published
- Updated
Stack: system · applications
Affected products and versions
zabbix
- Versions
- Zabbix Server 2.4.8.r1: Affected
No fix published
zabbix Debian:12
- Affected ranges
- ECOSYSTEM: < 1:4.0.0+dfsg-1
Update to 1:4.0.0+dfsg-1
zabbix Debian:13
- Affected ranges
- ECOSYSTEM: < 1:4.0.0+dfsg-1
Update to 1:4.0.0+dfsg-1
zabbix Debian:14
- Affected ranges
- ECOSYSTEM: < 1:4.0.0+dfsg-1
Update to 1:4.0.0+dfsg-1
zabbix Ubuntu:Pro:14.04:LTS
- Versions
- 1:2.0.6+dfsg-1ubuntu2
- 1:2.2.0+dfsg-1ubuntu1
- 1:2.2.0+dfsg-6ubuntu1
- 1:2.2.1+dfsg-1ubuntu3
- 1:2.2.2+dfsg-1ubuntu1
- 1:2.2.2+dfsg-1ubuntu1+esm1
- 1:2.2.2+dfsg-1ubuntu1+esm3
- 1:2.2.2+dfsg-1ubuntu1+esm4
- 1:2.2.2+dfsg-1ubuntu1+esm5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
zabbix Ubuntu:Pro:16.04:LTS
- Versions
- 1:2.4.6+dfsg-1
- 1:2.4.7+dfsg-1
- 1:2.4.7+dfsg-2
- 1:2.4.7+dfsg-2ubuntu2
- 1:2.4.7+dfsg-2ubuntu2.1
- 1:2.4.7+dfsg-2ubuntu2.1+esm1
- 1:2.4.7+dfsg-2ubuntu2.1+esm2
- 1:2.4.7+dfsg-2ubuntu2.1+esm3
- 1:2.4.7+dfsg-2ubuntu2.1+esm4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published