CVE-2022-23134 — Possible view of the setup pages by unauthenticated users if config file already exists
After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step…
Published: 2022-01-13 · CVSS: 3.7 · CVSS 3.1
After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7