CVE-2017-2825

In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic checks, resulting in database writes. An attacker can set up a Man-in-the-Middle server to alter trapper requests made between an active Zabbix proxy and Server to trigger this...

Design/Logic Flaw

In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic checks, resulting in database writes. An attacker can set up a Man-in-the-Middle server to alter trapper requests made between an active Zabbix proxy and Server to trigger this...

CVE-2017-2826

CVE-2017-2826 describes an information-disclosure vulnerability in Zabbix Server 2.4.x where the iConfig proxy request can cause the server to reveal the configuration of any Zabbix proxy. The attacker can trigger this by sending crafted requests from an active Zabbix proxy. The connected documen...