CVE-2022-23134 Zabbix Frontend Improper Access Control

What is CVE-2022-23134?

CVE-2022-23134 is a low-severity missing authorization vulnerability in Debian Debian Linux, published on 13 Jan 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

Weakness: CWE-287, CWE-284

Which versions are affected by CVE-2022-23134?

It affects 3 products.

Products include Debian Debian Linux, Fedoraproject Fedora, Zabbix Zabbix.

How do I fix CVE-2022-23134?

Apply the vendor's patch. US federal agencies must fix it by 8 Mar 2022.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2022-23134 being exploited?

Yes. Attackers have exploited CVE-2022-23134 in the wild since at least 22 Feb 2022.

Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.

Other vulnerabilities in Debian Debian Linux

• CVE-2015-3306 ProFTPD Improper Access Control Exploited Critical 10.0
• CVE-2025-49113 RoundCube Webmail Deserialization of Untrusted Data Exploited Critical 9.9
• CVE-2026-24061 GNU InetUtils Argument Injection Exploited Critical 9.8
• CVE-2025-39682 Linux Kernel Improper Check for Unusual or Exceptional Conditions Exploited Critical 9.8
• CVE-2024-9680 Mozilla Firefox Use-After-Free Exploited Critical 9.8

All Debian Debian Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2022-23134, DLA-2914-1, GHSA-mv97-qj5h-25f3, openSUSE-SU-2024:11772-1.