What’s Vulnerable › Vulnerabilities

CVE-2019-17382

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 54.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-10-09 · updated 2026-06-17
• Weakness: CWE-639

Description

An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/Password (i.e., anonymously). All created elements (Dashboard/Report/Screen/Map) are accessible by other users and by an admin.

Affected products

• Zabbix: through 4.4

References

• https://lists.debian.org/debian-lts-announce/2023/08/msg00027.html
• https://www.exploit-db.com/exploits/47467
• https://lists.debian.org/debian-lts-announce/2023/08/msg00027.html
• https://www.exploit-db.com/exploits/47467

Get alerted when CVE-2019-17382 or the next vulnerability affects your stack