Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2022-46768

File name information disclosure vulnerability in Zabbix Web Service Report Generation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zabbix

Description

Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zabbix Web Service Report Generation

  • 6.0.0-6.0.11affected
  • 6.2.0-6.2.5affected

Zabbix Zabbix agent 2 (MSI packages)

  • 6.0.12rc1 to < unspecifiedunaffected
  • 6.2.6rc1 to < unspecifiedunaffected

References