{"action":"Upgrade zabbix to 1:4.0.0+dfsg-1 or later.","affected":[{"fixed":"1:4.0.0+dfsg-1","introduced":"0"}],"component":"zabbix","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1:4.0.0+dfsg-1"],"id":"tcs_01M5NCD6G3GYC8Z5SSF4RSX3P2","modified_at":"2026-09-01T20:03:47.872496951Z","published_at":"2018-04-09T20:29:00.217Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2017-2826","https://security-tracker.debian.org/tracker/CVE-2017-2826"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2017-2826","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2017-2826"}],"summary":"An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted iConfig proxy request can cause the Zabbix server to send the configuration info"}