Title

Zabbix Command Injection Vulnerability (Cat II impact)

Discussion

Zabbix has released a security bulletin addressing a command injection vulnerability in Zabbix versions Zabbix is an enterprise-class open source distributed monitoring solution. To exploit this vulnerability, an attacker could submit a malicious request to an affected application. If sucessfully exploited, the attacker would execute arbitrary code in context of the affected application.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-68829

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.