UpHeron
All vulnerabilities

Servers and applications

CVE-2022-23132

During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level

Severity
High 7.3
Published
13 Jan 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
ZabbixServers and applications · cpe:a:zabbix:zabbix
  • Version 6.0.0-alpha7
  • Version 6.0.0-alpha6
  • Version 6.0.0-alpha5
  • Version 6.0.0-alpha4
All 10 release lines
  • From 4.0.0 up to 4.0.36
  • From 5.0.0 up to 5.0.18
  • From 5.4.0 up to 5.4.8
  • Version 6.0.0-alpha1
  • Version 6.0.0-alpha2
  • Version 6.0.0-alpha3
  • Version 6.0.0-alpha4
  • Version 6.0.0-alpha5
  • Version 6.0.0-alpha6
  • Version 6.0.0-alpha7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-23132
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-23132