Test ID:	1.3.6.1.4.1.25623.1.1.1.2.2023.3390
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DLA-3390-1)
Summary:	The remote host is missing an update for the Debian 'zabbix' package(s) announced via the DLA-3390-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'zabbix' package(s) announced via the DLA-3390-1 advisory. Vulnerability Insight: Several security vulnerabilities have been discovered in zabbix, a network monitoring solution, potentially allowing User Enumeration, Cross-Site-Scripting or Cross-Site Request Forgery. CVE-2019-15132 Zabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to enumerate application usernames based on the variability of server responses (e.g., the Login name or password is incorrect and No permissions for system access messages, or just blocking for a number of seconds). This affects both api_jsonrpc.php and index.php. CVE-2020-15803 Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget. CVE-2021-27927 In Zabbix from 4.0.x before 4.0.28rc1, 5.0.0alpha1 before 5.0.10rc1, 5.2.x before 5.2.6rc1, and 5.4.0alpha1 before 5.4.0beta2, the CControllerAuthenticationUpdate controller lacks a CSRF protection mechanism. The code inside this controller calls diableSIDValidation inside the init() method. An attacker doesn't have to know Zabbix user login credentials, but has to know the correct Zabbix URL and contact information of an existing user with sufficient privileges. CVE-2022-24349 An authenticated user can create a link with reflected XSS payload for actions' pages, and send it to other users. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim. This attack can be implemented with the help of social engineering and expiration of a number of factors - an attacker should have authorized access to the Zabbix Frontend and allowed network connection between a malicious server and victim's computer, understand attacked infrastructure, be recognized by the victim as a trustee and use trusted communication channel. CVE-2022-24917 An authenticated user can create a link with reflected Javascript code inside it for services' page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim during social engineering attacks. CVE-2022-24919 An authenticated user can create a link with reflected Javascript code inside it for graphs' page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim during social engineering attacks. CVE-2022-35229 An authenticated user can create a link with ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'zabbix' package(s) on Debian 10. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-15132 https://support.zabbix.com/browse/ZBX-16532 https://lists.debian.org/debian-lts-announce/2021/04/msg00018.html https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html Common Vulnerability Exposure (CVE) ID: CVE-2020-15803 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2ZHHIUYIVA5GZYLKW6A5G6HRELPOBZFE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TIRIMOXH6GSBAANDCB3ANLJK4CRLWRXT/ https://support.zabbix.com/browse/ZBX-18057 https://lists.debian.org/debian-lts-announce/2020/08/msg00007.html SuSE Security Announcement: openSUSE-SU-2020:1604 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00007.html Common Vulnerability Exposure (CVE) ID: CVE-2021-27927 https://support.zabbix.com/browse/ZBX-18942 Common Vulnerability Exposure (CVE) ID: CVE-2022-24349 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QWP6UBFA5T6MOQPY2VDUG5YAJBFPYRFF/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2V4N22R3QVTYAJMWFK2U2O6QXAZYM35Z/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWDZONUHDYKBXTAIAGHSYQDEGORD2QT7/ https://support.zabbix.com/browse/ZBX-20680 https://lists.debian.org/debian-lts-announce/2022/04/msg00011.html Common Vulnerability Exposure (CVE) ID: CVE-2022-24917 Common Vulnerability Exposure (CVE) ID: CVE-2022-24919 Common Vulnerability Exposure (CVE) ID: CVE-2022-35229 https://support.zabbix.com/browse/ZBX-21306 https://lists.debian.org/debian-lts-announce/2023/08/msg00027.html Common Vulnerability Exposure (CVE) ID: CVE-2022-35230 https://support.zabbix.com/browse/ZBX-21305
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.