Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 17/05/2024 Updated: 17/05/2024

Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.

Debian Bug report logs - #1072120 zabbix: CVE-2024-22120 Package: src:zabbix; Maintainer for src:zabbix is Dmitry Smirnov <onlyjob@debianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Tue, 28 May 2024 20:42:06 UTC Severity: grave Tags: security, upstream Forwarded to supportzabbixcom/brow ...

CVE-2024-22120-RCE

https://support.zabbix.com/browse/ZBX-24505 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072120 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-22120

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect