Critical severity · published Dec 5, 2022
CVE-2022-43515
Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it
9.8
CVSS
1.3%
EPSS
No
On KEV
Description
Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addresses can access it. In this way, any user will not be able to access the Zabbix Frontend while it is being maintained and possible sensitive data will be prevented from being disclosed. An attacker can bypass this protection and access the instance using IP address not listed in the defined range.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Frontend · Zabbix
4.0.0 through 4.0.44; 5.0.0 through 5.0.29; 6.0.0 through 6.0.9; 6.2.0 through 6.2.4; 5.0.30; 6.0.11; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-43515
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-43515
lists.debian.org
https://lists.debian.org/debian-lts-announce/2023/08/msg00027.html
Exploit
https://support.zabbix.com/browse/ZBX-22050
lists.debian.org
https://lists.debian.org/debian-lts-announce/2024/10/msg00000.html
More from Frontend
8.8
CVE-2023-32725
The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports
6.5
CVE-2025-49643
An authenticated Zabbix user (including Guest) is able to cause disproportionate CPU load on the webserver by sending specially crafted parameters to /imgstore.php, leading to…
6.1
CVE-2023-30958
A security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed
6.1
CVE-2023-29457
Reflected XSS attacks, occur when a malicious script is reflected off a web application to the victim's browser
6.1
CVE-2023-29455
Reflected XSS attacks, also known as non-persistent attacks, occur when a malicious script is reflected off a web application to the victim's browser