CVE-2022-23131

CVE-2022-23131 Zabbix Frontend Authentication Bypass Vulnerability Description This script is an exploit for CVE-2022-23131 , a vulnerability in the Zabbix SSO Single Sign-On mechanism. The vulnerability allows an attacker to bypass authentication via a specially crafted zbxsession cookie, giving...

Exploit for Authentication Bypass by Spoofing in Zabbix

CVE-2022-23131 - Zabbix SAML SSO Authentication Bypass + RCE...

EUVD-2024-36350

Malicious code in bioql PyPI...

Zabbix SSO Privilege Bypass

The vulnerability of the Single Sign-On SSO authentication mechanism of the universal monitoring system Zabbix relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and enhance their...

SUSE CVE-2024-36466

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2024-36466

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2024-36466

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2024-36466

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2024-36466

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2024-36466 Unauthenticated Zabbix frontend takeover when SSO is being used

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...

CVE-2024-36466

CVE-2024-36466 describes a flaw in Zabbix where an attacker can forge the zbx_session cookie, enabling sign‑in with admin permissions via the frontend authentication mechanism. The description and multiple third‑party advisories (e.g., Zabbix references, Tencent/Tenable Nessus plugins, and NCSC a...

CVE-2024-36466: Authentication Bypass by Spoofing

A bug in the code allows an attacker to sign a forged zbxsession cookie, which then allows them to sign in with admin permissions...