cnvd - cnvd-2022-22698

cnvd-2022-22698

Vulnerability from cnvd

Title: Zabbix Frontend跨站脚本漏洞

Description:

Zabbix Frontend是美国Zabbix公司的一个监控软件前端工具。

Zabbix Frontend存在跨站脚本漏洞，经过身份验证的攻击者可利用该漏洞为图形页面创建一个带有反射Javascript代码的链接，并将其发送给其他受害者。

Severity: 低

Patch Name: Zabbix Frontend跨站脚本漏洞的补丁

Patch Description:

Zabbix Frontend是美国Zabbix公司的一个监控软件前端工具。

Zabbix Frontend存在跨站脚本漏洞，经过身份验证的攻击者可利用该漏洞为图形页面创建一个带有反射Javascript代码的链接，并将其发送给其他受害者。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://support.zabbix.com/browse/ZBX-20680

Reference: https://support.zabbix.com/browse/ZBX-20680

Impacted products

Name
['Zabbix Frontend >=4.0.0，<=4.0.38', 'Zabbix Frontend >=5.0.0，<=5.0.20', 'Zabbix Frontend >=5.4.0，<=5.4.10', 'Zabbix Frontend 6.0']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-24349",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2022-24349"
    }
  },
  "description": "Zabbix Frontend\u662f\u7f8e\u56fdZabbix\u516c\u53f8\u7684\u4e00\u4e2a\u76d1\u63a7\u8f6f\u4ef6\u524d\u7aef\u5de5\u5177\u3002\n\nZabbix Frontend\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4e3a\u56fe\u5f62\u9875\u9762\u521b\u5efa\u4e00\u4e2a\u5e26\u6709\u53cd\u5c04Javascript\u4ee3\u7801\u7684\u94fe\u63a5\uff0c\u5e76\u5c06\u5176\u53d1\u9001\u7ed9\u5176\u4ed6\u53d7\u5bb3\u8005\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://support.zabbix.com/browse/ZBX-20680",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-22698",
  "openTime": "2022-03-25",
  "patchDescription": "Zabbix Frontend\u662f\u7f8e\u56fdZabbix\u516c\u53f8\u7684\u4e00\u4e2a\u76d1\u63a7\u8f6f\u4ef6\u524d\u7aef\u5de5\u5177\u3002\r\n\r\nZabbix Frontend\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4e3a\u56fe\u5f62\u9875\u9762\u521b\u5efa\u4e00\u4e2a\u5e26\u6709\u53cd\u5c04Javascript\u4ee3\u7801\u7684\u94fe\u63a5\uff0c\u5e76\u5c06\u5176\u53d1\u9001\u7ed9\u5176\u4ed6\u53d7\u5bb3\u8005\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Zabbix Frontend\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Zabbix Frontend \u003e=4.0.0\uff0c\u003c=4.0.38",
      "Zabbix Frontend \u003e=5.0.0\uff0c\u003c=5.0.20",
      "Zabbix Frontend \u003e=5.4.0\uff0c\u003c=5.4.10",
      "Zabbix Frontend 6.0"
    ]
  },
  "referenceLink": "https://support.zabbix.com/browse/ZBX-20680",
  "serverity": "\u4f4e",
  "submitTime": "2022-03-11",
  "title": "Zabbix Frontend\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e"
}

CVE-2022-24349 (GCVE-0-2022-24349)

Vulnerability from cvelistv5

Published

2022-03-09 19:30

Modified

2024-09-16 18:45

Severity ?

4.6 (Medium) - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

CWE

CWE-79 - Cross-site Scripting (XSS)

Summary

An authenticated user can create a link with reflected XSS payload for actions’ pages, and send it to other users. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim. This attack can be implemented with the help of social engineering and expiration of a number of factors - an attacker should have authorized access to the Zabbix Frontend and allowed network connection between a malicious server and victim’s computer, understand attacked infrastructure, be recognized by the victim as a trustee and use trusted communication channel.

References

▼	URL	Tags
	https://support.zabbix.com/browse/ZBX-20680
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V4N22R3QVTYAJMWFK2U2O6QXAZYM35Z/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWDZONUHDYKBXTAIAGHSYQDEGORD2QT7/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QWP6UBFA5T6MOQPY2VDUG5YAJBFPYRFF/	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2022/04/msg00011.html	mailing-list
	https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html	mailing-list

Impacted products

	Vendor	Product	Version
	Zabbix	Frontend	Version: 4.0.0-4.0.38 Version: 5.0.0-5.0.20 Version: 5.4.0-5.4.10 Version: 6.0 Patch: 4.0.39rc1 Patch: 5.0.21rc1 Patch: 5.4.11rc1 Patch: 6.0.1rc1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:07:02.563Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.zabbix.com/browse/ZBX-20680"
          },
          {
            "name": "FEDORA-2022-5fab125c08",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V4N22R3QVTYAJMWFK2U2O6QXAZYM35Z/"
          },
          {
            "name": "FEDORA-2022-d714c0d39c",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWDZONUHDYKBXTAIAGHSYQDEGORD2QT7/"
          },
          {
            "name": "FEDORA-2022-19a9053f17",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QWP6UBFA5T6MOQPY2VDUG5YAJBFPYRFF/"
          },
          {
            "name": "[debian-lts-announce] 20220412 [SECURITY] [DLA 2980-1] zabbix security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00011.html"
          },
          {
            "name": "[debian-lts-announce] 20230412 [SECURITY] [DLA 3390-1] zabbix security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Frontend",
          "vendor": "Zabbix",
          "versions": [
            {
              "status": "affected",
              "version": "4.0.0-4.0.38"
            },
            {
              "status": "affected",
              "version": "5.0.0-5.0.20"
            },
            {
              "status": "affected",
              "version": "5.4.0-5.4.10"
            },
            {
              "status": "affected",
              "version": "6.0"
            },
            {
              "lessThan": "unspecified",
              "status": "unaffected",
              "version": "4.0.39rc1",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "unaffected",
              "version": "5.0.21rc1",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "unaffected",
              "version": "5.4.11rc1",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "unaffected",
              "version": "6.0.1rc1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "internal research"
        }
      ],
      "datePublic": "2022-02-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An authenticated user can create a link with reflected XSS payload for actions\u2019 pages, and send it to other users. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim. This attack can be implemented with the help of social engineering and expiration of a number of factors - an attacker should have authorized access to the Zabbix Frontend and allowed network connection between a malicious server and victim\u2019s computer, understand attacked infrastructure, be recognized by the victim as a trustee and use trusted communication channel."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Cross-site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-04-12T00:00:00",
        "orgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8",
        "shortName": "Zabbix"
      },
      "references": [
        {
          "url": "https://support.zabbix.com/browse/ZBX-20680"
        },
        {
          "name": "FEDORA-2022-5fab125c08",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2V4N22R3QVTYAJMWFK2U2O6QXAZYM35Z/"
        },
        {
          "name": "FEDORA-2022-d714c0d39c",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWDZONUHDYKBXTAIAGHSYQDEGORD2QT7/"
        },
        {
          "name": "FEDORA-2022-19a9053f17",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QWP6UBFA5T6MOQPY2VDUG5YAJBFPYRFF/"
        },
        {
          "name": "[debian-lts-announce] 20220412 [SECURITY] [DLA 2980-1] zabbix security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/04/msg00011.html"
        },
        {
          "name": "[debian-lts-announce] 20230412 [SECURITY] [DLA 3390-1] zabbix security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "To remediate this vulnerability, apply the updates"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Reflected XSS in action configuration window of Zabbix Frontend",
      "workarounds": [
        {
          "lang": "en",
          "value": "The vulnerability can be exploited only by authenticated users. If an immediate update is not possible, review user access rights to your Zabbix Frontend, be attentive to browser warnings and always check any links you can receive via email or other means of communication, which lead to the actionconf.php page of Zabbix Frontend and contain suspicious parameters with special symbols. If you have clicked on the suspicious link, do not fill out the opened form."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8",
    "assignerShortName": "Zabbix",
    "cveId": "CVE-2022-24349",
    "datePublished": "2022-03-09T19:30:26.724288Z",
    "dateReserved": "2022-02-02T00:00:00",
    "dateUpdated": "2024-09-16T18:45:12.504Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted