Debian/zabbix: medium 5.3
Zabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to enumerate application usernames based on the variability of server responses (e.g., the "Login name or passwo
Action: Upgrade zabbix to 1:5.0.7+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:5.0.7+dfsg-1 | - |
Fixed versions
| 1:5.0.7+dfsg-1 |
Sources
published · modified · JSON