UpHeron
All vulnerabilities

Servers and applications

CVE-2017-2826

An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted iConfig proxy request can cause the Zabbix server to send the configuration information of any Zabbix proxy, resulting in information disclosure. An attacker can make requests from an active Zabbix proxy to trigger this vulnerability.

Severity
Low 3.7
Published
9 Apr 2018
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
3.3% in the next 30 daysHigher than 88% of CVEs. EPSS by FIRST, 10 Nov 2026
Weakness
Information exposure (CWE-200)
Attack
Over the network · Only under certain conditions · No login needed · No user action needed
Attacker can
Read some data
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Sources
NVD

Affected software

SoftwareAffected versions
ZabbixServers and applications · cpe:a:zabbix:zabbix
  • Version 2.4.9
  • Version 2.4.9-rc1
  • Version 2.4.8
  • Version 2.4.8-rc1
All 23 release lines
  • Version 2.4.0-rc1
  • Version 2.4.0-rc2
  • Version 2.4.0-rc3
  • Version 2.4.0
  • Version 2.4.1-rc1
  • Version 2.4.1-rc2
  • Version 2.4.1
  • Version 2.4.2-rc1
  • Version 2.4.2
  • Version 2.4.3-rc1
  • Version 2.4.3
  • Version 2.4.4-rc1
  • Version 2.4.4
  • Version 2.4.5-rc1
  • Version 2.4.5
  • Version 2.4.6-rc1
  • Version 2.4.6
  • Version 2.4.7-rc1
  • Version 2.4.7
  • Version 2.4.8-rc1
  • Version 2.4.8
  • Version 2.4.9-rc1
  • Version 2.4.9

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-2826
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-2826