Debian: Security Advisory (DLA-3390-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3390-1] zabbix security update

Debian LTS Advisory DLA-3390-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost April 12, 2023 https://wiki.debian.org/LTS Package : zabbix Version : 1:4.0.4+dfsg-1+deb10u1 CVE ID : CVE-2019-15132 CVE-2020-15803 CVE-2021-27927 CVE-2022-24349 CVE-2022-24917...

openSUSE: Security Advisory for zabbix (openSUSE-SU-2022:0036-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for zabbix (moderate)

openSUSE Security Update: Security update for zabbix Announcement ID: openSUSE-SU-2022:0036-1 Rating: moderate References: 1144018 1174253 1181400 1183014 1194681 Cross-References: CVE-2020-15803 CVE-2021-27927 CVE-2022-23134 CVSS scores: CVE-2020-15803 NVD : 6.1...

SUSE-SU-2021:0990-1 Security update for zabbix

This update for zabbix fixes the following issues: - CVE-2021-27927: Fixed an improper CSRF protection mechanism bsc1183014. - CVE-2013-7484: Fixed an issue where passwords in the users table were unsalted bsc1158321...

CVE-2021-27927

CVE-2021-27927 affects Zabbix releases listed in the description: 4.0.x before 4.0.28rc1, 5.0.0alpha1 before 5.0.10rc1, 5.2.x before 5.2.6rc1, and 5.4.0alpha1 before 5.4.0beta2. The root cause is a CSRF protection gap in the CControllerAuthenticationUpdate controller, where the code calls diableS...