CVE-2013-7484
Zabbix before 5.0 represents passwords in the users table with unsalted MD5.
Zabbix before 5.0 represents passwords in the users table with unsalted MD5.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Zabbix before 5.0 represents passwords in the users table with unsalted MD5.
- Record
CVE-2013-7484- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-326
- Updated
- 2026-11-02
CVE List No score
Zabbix before 5.0 represents passwords in the users table with unsalted MD5.
- Record
CVE-2013-7484- Updated
- 2026-11-02
EUVDEUVD-2013-7242 No score
Zabbix before 5.0 represents passwords in the users table with unsalted MD5.
- Record
EUVD-2013-7242- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5j69-6hhj-5x7f
Zabbix before 5.0 represents passwords in the users table with unsalted MD5.
Zabbix before 5.0 represents passwords in the users table with unsalted MD5.
- Record
GHSA-5j69-6hhj-5x7f- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-326
- Updated
- 2026-11-02
OSV
Zabbix before 5.0 represents passwords in the users table with unsalted MD5.
- Record
CVE-2013-7484- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-7484
Zabbix before 5.0 represents passwords in the users table with unsalted MD5.
- Record
DEBIAN-CVE-2013-7484- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-7484
Zabbix before 5.0 represents passwords in the users table with unsalted MD5.
- Record
UBUNTU-CVE-2013-7484- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVSUSE-SU-2021:0990-1 No score
Security update for zabbix
This update for zabbix fixes the following issues:
- CVE-2021-27927: Fixed an improper CSRF protection mechanism (bsc#1183014).
- CVE-2013-7484: Fixed an issue where passwords in the users table were unsalted (bsc#1158321).
- Record
SUSE-SU-2021:0990-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
zabbixDebian:12 |
before 1:5.0.0+dfsg-1 | 1:5.0.0+dfsg-1 |
zabbixDebian:13 |
before 1:5.0.0+dfsg-1 | 1:5.0.0+dfsg-1 |
zabbixDebian:14 |
before 1:5.0.0+dfsg-1 | 1:5.0.0+dfsg-1 |
zabbixDebian:10 |
before 1:4.0.4+dfsg-1+deb10u2, plus listed versions 1:4.0.4+dfsg-11:4.0.4+dfsg-1+deb10u1 |
1:4.0.4+dfsg-1+deb10u2 |
zabbixSUSE:Linux Enterprise Server 12 SP5 |
before 4.0.12-4.12.1 | 4.0.12-4.12.1 |
zabbixSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 4.0.12-4.12.1 | 4.0.12-4.12.1 |
zabbixUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1:2.0.6+dfsg-1ubuntu21:2.2.0+dfsg-1ubuntu11:2.2.0+dfsg-6ubuntu11:2.2.1+dfsg-1ubuntu31:2.2.2+dfsg-1ubuntu1 Show 4 moreShow less1:2.2.2+dfsg-1ubuntu1+esm11:2.2.2+dfsg-1ubuntu1+esm31:2.2.2+dfsg-1ubuntu1+esm41:2.2.2+dfsg-1ubuntu1+esm5 |
None known |
zabbixUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1:2.4.6+dfsg-11:2.4.7+dfsg-11:2.4.7+dfsg-21:2.4.7+dfsg-2ubuntu21:2.4.7+dfsg-2ubuntu2.1 Show 4 moreShow less1:2.4.7+dfsg-2ubuntu2.1+esm11:2.4.7+dfsg-2ubuntu2.1+esm21:2.4.7+dfsg-2ubuntu2.1+esm31:2.4.7+dfsg-2ubuntu2.1+esm4 |
None known |
zabbixUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1:3.0.7+dfsg-31:3.0.12+dfsg-11:3.0.12+dfsg-1ubuntu0.1~esm11:3.0.12+dfsg-1ubuntu0.1~esm21:3.0.12+dfsg-1ubuntu0.1~esm31:3.0.12+dfsg-1ubuntu0.1~esm4 |
None known |
zabbixUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1:4.0.4+dfsg-1build21:4.0.4+dfsg-1build31:4.0.11+dfsg-11:4.0.14+dfsg-11:4.0.15+dfsg-1 Show 5 moreShow less1:4.0.16+dfsg-11:4.0.16+dfsg-1build11:4.0.17+dfsg-11:4.0.17+dfsg-1ubuntu0.1~esm11:4.0.17+dfsg-1ubuntu0.1~esm2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-7484 is a high vulnerability (CVSS 7.5) in Zabbix, published November 30, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. Fixed in zabbix 1:5.0.0+dfsg-1.