Description

Zabbix is a monitoring system. It is configured to allow guest (anonymous) access.

Remediation

Disable guest access

References

Zabbix Documentation 4.0

Related Vulnerabilities

Express Development Mode enabled

WordPress Plugin Simple History Information Disclosure (2.7.4)

Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5492)

WordPress Plugin Tinymce Thumbnail Gallery 'href' Parameter Information Disclosure (1.0.7)

WordPress Plugin wp-FileManager Arbitrary File Disclosure (1.3.0)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure CWE-200