ALT-PU-2016-2058-1
Closed vulnerabilities
Published: 2020-10-08
BDU:2020-04792
Уязвимость универсальной системы мониторинга Zabbix, связанная с ошибками управления генерацией кода, позволяющая нарушителю выполнить произвольный код
Severity: CRITICAL (9.8)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2020-10-07
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2020-11800
Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code.
Severity: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00007.html
- [debian-lts-announce] 20201121 [SECURITY] [DLA 2461-1] zabbix security update
- https://support.zabbix.com/browse/DEV-1538
- https://support.zabbix.com/browse/ZBX-17600
- https://support.zabbix.com/browse/ZBXSEC-30
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00007.html
- https://support.zabbix.com/browse/ZBXSEC-30
- https://support.zabbix.com/browse/ZBX-17600
- https://support.zabbix.com/browse/DEV-1538
- [debian-lts-announce] 20201121 [SECURITY] [DLA 2461-1] zabbix security update