Riskcovery

CVE-2022-43515

X-Forwarded-For header is active by default causes access to Zabbix sites in maintenance mode

State
Published
Severity
5.3 Medium
Published
Dec 12, 2022
Updated
Nov 3, 2025
Reserved
Oct 19, 2022

Read the record on cve.org

Description

Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it. In this way, any user will not be able to access the Zabbix Frontend while it is being maintained and possible sensitive data will be prevented from being disclosed. An attacker can bypass this protection and access the instance using IP address not listed in the defined range.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NZabbix

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
FrontendZabbix
  • 4.0.0-4.0.44Affected
  • 5.0.0-5.0.29Affected
  • 6.0.0-6.0.9Affected
  • 6.2.0-6.2.4Affected
  • 5.0.30rc1 to before unspecifiedNot affected
  • 6.0.11rc1 to before unspecifiedNot affected
  • 6.2.5rc1 to before unspecifiedNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.