| Package | Affected versions | Patched versions |
|---|---|---|
| zabbix | = 6.0.0≥ 4.0.0, ≤ 4.0.36≥ 5.0.0, ≤ 5.0.18≥ 5.4.0, ≤ 5.4.8 |
During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free