- Vendor / Project
- Zabbix
- Product
- Frontend
- Date added
- Feb 22, 2022
- Due date
- Mar 8, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-290
Description
Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.
Required action
Apply updates per vendor instructions.