| Package | Affected versions | Patched versions |
|---|---|---|
| zabbix | = 1.8= 1.8.1= 1.8.15= 1.8.16= 1.8.18= 1.8.2= 1.8.3= 2.0.0= 2.0.1= 2.0.10= 2.0.2= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.7= 2.0.8= 2.0.9= 2.2.0= 2.2.1≤ 1.8.19 |
The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free