CVE-2023-32723
CVE-2023-32723 · Inefficient permission check in class CControllerAuthenticationUpdate
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Request to LDAP is sent before user permissions are checked.
CVSS 8.5 · High · EPSS 0.7% · Fix available
- Published
- Updated
Stack: system · applications
Affected products and versions
zabbix
- Versions
- ≥ 4.0.0, ≤ 4.0.19rc1: Affected; ≥ 4.0.20rc1: Not affected (git)
- ≥ 4.4.0, ≤ 4.4.7rc1: Affected; ≥ 4.4.8rc1: Not affected (git)
- ≥ 5.0.0alpha1, ≤ 5.0.0alpha4: Affected; ≥ 5.0.0alpha4: Not affected (git)
Update to 4.0.20rc1; Update to 4.4.8rc1; Update to 5.0.0alpha4
zabbix Debian:12
- Affected ranges
- ECOSYSTEM: < 1:5.0.0+dfsg-1
Update to 1:5.0.0+dfsg-1
zabbix Debian:13
- Affected ranges
- ECOSYSTEM: < 1:5.0.0+dfsg-1
Update to 1:5.0.0+dfsg-1
zabbix Debian:14
- Affected ranges
- ECOSYSTEM: < 1:5.0.0+dfsg-1
Update to 1:5.0.0+dfsg-1
zabbix Ubuntu:Pro:20.04:LTS
- Versions
- 1:4.0.4+dfsg-1build2
- 1:4.0.4+dfsg-1build3
- 1:4.0.11+dfsg-1
- 1:4.0.14+dfsg-1
- 1:4.0.15+dfsg-1
- 1:4.0.16+dfsg-1
- 1:4.0.16+dfsg-1build1
- 1:4.0.17+dfsg-1
- 1:4.0.17+dfsg-1ubuntu0.1~esm1
- 1:4.0.17+dfsg-1ubuntu0.1~esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published