{"id":"CVE-2022-23134","kind":"vulnerability","aliases":["CVE-2022-23134"],"related":[],"title":"Zabbix Frontend: Zabbix Frontend Improper Access Control Vulnerability","description":"After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.","summary":"Zabbix Frontend has an improper access control flaw that lets malicious actors pass step checks and change the configuration of the Zabbix Frontend. CISA lists it as actively exploited in the wild.","severity":"medium","cvss":5.3,"epss":0.9526,"exploited":true,"exploited_at":"2022-02-22T00:00:00+00:00","products":[{"name":"Zabbix Frontend","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","other","self-hosted","zabbix"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply updates per vendor instructions (affected and fixed versions not stated in the sources).","status":"open","published_at":"2022-01-13T16:15:08+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:26:32+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-23T21:26:32Z","model":"claude-haiku-5-5","output":{"fix":"Apply updates per vendor instructions (affected and fixed versions not stated in the sources).","reach":"unknown","impact":"medium","summary":"Zabbix Frontend has an improper access control flaw that lets malicious actors pass step checks and change the configuration of the Zabbix Frontend. CISA lists it as actively exploited in the wild.","category":"other","who_cares":["zabbix","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker changes Zabbix Frontend configuration, exact scope unspecified","analyst_note":"Find affected and fixed Zabbix Frontend versions and the vendor advisory at zabbix.com for this CVE-2022-23134 and confirm how to check exposure.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00045,"input_tokens":2812,"output_tokens":338,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2022':10A,13A '-23134':11A,14A 'access':6A,28B 'activ':50B 'actor':34B,80C 'administr':72C 'chang':39B,87C 'check':37B,84C 'cisa':46B 'configur':41B,89C 'control':7A,29B 'cve':9A,12A 'exploit':17B,51B 'file':64C 'flaw':30B 'frontend':2A,4A,16A,24B,45B,92C 'host':21B 'improp':5A,27B 'initi':57C 'let':32B 'list':47B 'malici':33B,79C 'pass':35B,82C 'potenti':86C 'process':59C 'reachabl':66C 'self':20B 'self-host':19B 'setup':58C 'setup.php':63C 'step':36B,61C,83C 'super':71C 'super-administr':70C 'unauthent':75C 'user':76C 'vulner':8A 'well':78C 'wild':54B 'zabbix':1A,3A,15A,22B,23B,44B,91C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2022-01-13T16:15:08+00:00","kev":{"dateAdded":"2022-02-22","dueDate":"2022-03-08","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss_by":"security@zabbix.com","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2022-23134","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-23134","severity":null,"published_at":"2022-02-22T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T12:39:24+00:00","note":null},{"source":"epss","external_id":"CVE-2022-23134","url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23134","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2022-23134","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23134","severity":null,"published_at":"2022-01-13T16:15:08+00:00","modified_at":"2026-06-17T04:29:34+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}