CVE-2022-23132 — Incorrect permissions of [/var/run/zabbix] forces dac_override
During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes ca…
Published: 2022-01-13 · CVSS: 3.3 · CVSS 3.1
During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7