CVE:CVE-2022-23134
CNNVD:CNNVD-202201-1034
Zabbix是Zabbix公司的一套开源的监控系统。该系统支持网络监控、服务器监控、云监控和应用监控等。
Zabbix 存在授权问题漏洞，该漏洞源于在初始设置过程之后，setup.php 文件的某些步骤不仅可以由超级管理员访问，也可以由未经身份验证的用户访问。
solution:Upgrade zabbix zabbix to a higher version than 5.4.8,6.0.0:alpha1,6.0.0:alpha2,6.0.0:alpha3,6.0.0:alpha4,6.0.0:alpha5,6.0.0:alpha6,6.0.0:alpha7,6.0.0:beta1,and avoid the version [5.4.0,5.4.8],6.0.0:alpha1,6.0.0:alpha2,6.0.0:alpha3,6.0.0:alpha4,6.0.0:alpha5,6.0.0:alpha6,6.0.0:alpha7,6.0.0:beta1; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0