coldbraid

CVE-2022-23131 Zabbix Frontend

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.

CVSS
not scored

CWE-290

On CISA’s exploited list

Zabbix Frontend Authentication Bypass Vulnerability

Added
2022-02-22
Federal patch deadline
2022-03-08
Ransomware use
not known