Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE)
published January 27, 2022
CVSS
—
EPSS
4%
Percentile
90.3
In the wild
Unconfirmed
What it is
Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03927 · 90.3th percentile
Published
2022-01-27T15:43Z
EPSS history
Timeline
27 JAN 15:43Z
Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE)