{"id":"CVE-2022-23134","aliases":["DEBIAN-CVE-2022-23134","DLA-2914-1","EUVD-2022-28225","GHSA-mv97-qj5h-25f3","openSUSE-SU-2022:0036-1","openSUSE-SU-2024:11772-1"],"status":"published","title":"Possible view of the setup pages by unauthenticated users if config file already exists","description":"After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.","severity":{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.9526,"percentile":0.99867,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-284","CWE-287","CWE-863"],"published":"2022-01-13T15:50:42Z","modified":"2026-11-03T08:01:02Z","kev":{"date_added":"2022-02-22","due_date":"2022-03-08","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-02-22"},{"source":"kev","since":"2022-02-22"}],"exploits":[{"source":"pocgithub","id":"TheN00bBuilder/cve-2022-23134-poc-and-writeup","title":"TheN00bBuilder/cve-2022-23134-poc-and-writeup","date":"2025-03-23","url":"https://github.com/TheN00bBuilder/cve-2022-23134-poc-and-writeup"},{"source":"nuclei","id":"CVE-2022-23134","title":"Zabbix Setup Configuration Authentication Bypass","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23134.yaml"}],"fixes":[{"ecosystem":"Debian:12","package":"zabbix","fixed_in":["1:6.0.7+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"zabbix","fixed_in":["1:6.0.7+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"zabbix","fixed_in":["1:6.0.7+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"zabbix","fixed_in":["1:3.0.32+dfsg-0+deb9u2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.7+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.7+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:6.0.7+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.0.32+dfsg-0+deb9u2"}]}],"versions":["1:3.0.12+dfsg-1","1:3.0.17+dfsg-1","1:3.0.17+dfsg-1~bpo9+1","1:3.0.31+dfsg-0+deb9u1","1:3.0.32+dfsg-0+deb9u1","1:3.0.7+dfsg-3","1:3.0.7+dfsg-3+deb9u1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"zabbix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.37-lp153.2.3.1"}]}],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"dependencytrack","product":"frontend"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"zabbix","product":"frontend"},{"vendor":"zabbix","product":"zabbix"}],"references":[{"url":"https://support.zabbix.com/browse/ZBX-20384","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6SZYHXINBKCY42ITFSNCYE7KCSF33VRA/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Release Notes","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VB6W556GVXOKUYTASTDGL3AI7S3SJHX7/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Release Notes","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/02/msg00008.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23134","tags":["government-resource","US Government Resource","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23134"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6SZYHXINBKCY42ITFSNCYE7KCSF33VRA"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VB6W556GVXOKUYTASTDGL3AI7S3SJHX7"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6SZYHXINBKCY42ITFSNCYE7KCSF33VRA"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VB6W556GVXOKUYTASTDGL3AI7S3SJHX7"},{"url":"https://github.com/advisories/GHSA-mv97-qj5h-25f3"},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-23134","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EDFZEEJCPRPPDEWV6JULRJZVSQCMYOEY/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1144018","tags":["report"]},{"url":"https://bugzilla.suse.com/1174253","tags":["report"]},{"url":"https://bugzilla.suse.com/1181400","tags":["report"]},{"url":"https://bugzilla.suse.com/1183014","tags":["report"]},{"url":"https://bugzilla.suse.com/1194681","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-27927","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23134","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-23134","title":"Possible view of the setup pages by unauthenticated users if config file already exists","description":"After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.","status":"published","published":"2022-01-13T15:50:42.946Z","modified":"2025-10-21T23:15:49.129Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:34:29.842547Z"}],"euvd":[{"id":"EUVD-2022-28225","description":"After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.","status":"published","published":"2022-01-13T15:50:42Z","modified":"2025-10-21T23:15:49Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"exploited_since":"2022-02-22","updated_at":"2026-11-02T20:31:25.901288Z"}],"ghsa":[{"id":"GHSA-mv97-qj5h-25f3","title":"After the initial setup process, some steps of setup.php file are reachable not only by super...","description":"After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.","status":"published","published":"2022-02-09T00:01:05Z","modified":"2025-10-22T00:32:28Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-284","CWE-287","CWE-863"],"updated_at":"2026-11-02T15:04:05.344883Z"}],"kev":[{"id":"CVE-2022-23134","title":"Zabbix Frontend Improper Access Control Vulnerability","description":"Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend.","cwes":["CWE-284"],"kev":{"date_added":"2022-02-22","due_date":"2022-03-08","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2022-23134","description":"After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.","status":"published","published":"2022-01-13T16:15:08.227Z","modified":"2026-06-17T04:29:34.653Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284","CWE-287"],"updated_at":"2026-11-02T14:07:10.836864Z"}],"osv":[{"id":"CVE-2022-23134","description":"After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.","status":"published","published":"2022-01-13T16:15:08.227Z","modified":"2026-10-24T10:30:57.215532889Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:24.061177Z"},{"id":"DEBIAN-CVE-2022-23134","description":"After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.","status":"published","published":"2022-01-13T16:15:08.227Z","modified":"2026-11-03T08:01:02.758099303Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"DLA-2914-1","title":"zabbix - security update","status":"published","published":"2022-02-07T00:00:00Z","modified":"2026-03-09T01:23:05.265745Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"openSUSE-SU-2022:0036-1","title":"Security update for zabbix","description":"This update for zabbix fixes the following issues:\n\n- Updated to latest realease 4.0.37.\n\nSecurity issues fixed:\n\n- CVE-2022-23134: Fixed possible view of the setup pages by unauthenticated users if config file already exists (boo#1194681).\n- CVE-2021-27927: Fixed CSRF protection mechanism inside CControllerAuthenticationUpdate controller (boo#1183014).\n- CVE-2020-15803: Fixed stored XSS in the URL Widget (boo#1174253).\n\nBugfixes:\n\n- boo#1181400: Added hardening to systemd service(s)\n- boo#1144018: Restructured for easier maintenance because FATE#324346\n","status":"published","published":"2022-02-16T09:04:51Z","modified":"2026-02-04T03:06:53.907755Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11772-1","title":"zabbix-agent-4.0.37-1.1 on GA media","description":"These are all security issues fixed in the zabbix-agent-4.0.37-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:53:28.920649Z","updated_at":"2026-11-02T16:58:35.195147Z"}]}}