Summary
ZABBIX is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data.
An attacker can exploit this issue to read the contents of arbitrary database tables. This may allow the attacker to obtain sensitive information
other attacks are also possible.
Version prior to ZABBIX 1.8.7 are vulnerable.
Solution
Updates are available. Please see the reference for more details.
References
Severity
Classification
-
CVE CVE-2011-3265 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related Vulnerabilities