{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-22T16:12:05.471","vulnerabilities":[{"cve":{"id":"CVE-2022-23132","sourceIdentifier":"security@zabbix.com","published":"2022-01-13T16:15:08.113","lastModified":"2026-06-17T04:29:34.287","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level"},{"lang":"es","value":"Durante la instalación de Zabbix desde RPM, es usada la capacidad DAC_OVERRIDE SELinux para acceder a los archivos PID en la carpeta [/var/run/zabbix]. En este caso, los procesos del proxy o del servidor de Zabbix pueden omitir la comprobación de los permisos de lectura, escritura y ejecución de los archivos en el nivel del sistema de archivos"}],"affected":[{"source":"security@zabbix.com","affectedData":[{"vendor":"Zabbix","product":"Proxy, Server","versions":[{"version":"4.0.0 - 4.0.36","status":"affected"},{"version":"5.0.0 – 5.0.18","status":"affected"},{"version":"5.4.0 – 5.4.8","status":"affected"},{"version":"5.0.19","lessThan":"5.0.19*","versionType":"custom","status":"unaffected"},{"version":"5.4.9","lessThan":"5.4.9*","versionType":"custom","status":"unaffected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@zabbix.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":0.8,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"security@zabbix.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndIncluding":"4.0.36","matchCriteriaId":"285CF526-ACA1-438C-98FA-BEB4365E6531"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.18","matchCriteriaId":"E5754717-C846-47CA-81C2-D2BA46BED5AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.0","versionEndIncluding":"5.4.8","matchCriteriaId":"19429F9A-8623-4BA9-984B-4982418C21CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:6.0.0:alpha1:*:*:*:*:*:*","matchCriteriaId":"0DC67B03-AF43-45C9-8EAC-D60DA5887712"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:6.0.0:alpha2:*:*:*:*:*:*","matchCriteriaId":"9C483257-D279-4A20-8451-1C2D34AF8C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:6.0.0:alpha3:*:*:*:*:*:*","matchCriteriaId":"F9B37226-5339-4B5E-B515-BBC5D95A122D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:6.0.0:alpha4:*:*:*:*:*:*","matchCriteriaId":"69B35CCA-9F00-4FED-B2F6-3A561369AF44"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:6.0.0:alpha5:*:*:*:*:*:*","matchCriteriaId":"4270E53E-563E-4B60-9C19-5E8E78635B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:6.0.0:alpha6:*:*:*:*:*:*","matchCriteriaId":"E7BCC855-4C6A-4E00-BA2A-3CAD738DF49D"},{"vulnerable":true,"criteria":"cpe:2.3:a:zabbix:zabbix:6.0.0:alpha7:*:*:*:*:*:*","matchCriteriaId":"E5EE65D8-BD54-491F-8B61-A58D57C2D1CA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","matchCriteriaId":"A930E247-0B43-43CB-98FF-6CE7B8189835"},{"vulnerable":true,"criteria":"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*","matchCriteriaId":"80E516C0-98A4-4ADE-B69F-66A772E2BAAA"}]}]}],"references":[{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6SZYHXINBKCY42ITFSNCYE7KCSF33VRA/","source":"security@zabbix.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VB6W556GVXOKUYTASTDGL3AI7S3SJHX7/","source":"security@zabbix.com"},{"url":"https://support.zabbix.com/browse/ZBX-20341","source":"security@zabbix.com","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/10/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6SZYHXINBKCY42ITFSNCYE7KCSF33VRA/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VB6W556GVXOKUYTASTDGL3AI7S3SJHX7/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.zabbix.com/browse/ZBX-20341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]}]}}]}