NetSight
IP …
low3.3

CVE-2022-23132

During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder.

Impact

During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level

Affected products

VendorProductAffected versions
ZabbixZabbix
from 4.0.0 through 4.0.36
from 5.0.0 through 5.0.18
from 5.4.0 through 5.4.8
Version 6.0.0
FedoraprojectFedora
Versions 34, 35

Weakness classification

CWE-284CWE-732

References