# CVE-2022-23134

After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.

- Page: https://www.vulneraibility.com/cve/CVE-2022-23134
- CVSS: 3.7
- Known exploited: yes, in CISA KEV since 2022-02-22; CISA due date 2022-03-08
- EPSS: 95.26% (percentile 99.9)
- Unvetted proof-of-concept code on GitHub: 1 GitHub proof of concept · 1 Nuclei template (first 2025-03-23)
- CISA SSVC: exploitation active, automatable no, technical impact partial (assessed 2025-01-29)
- Weakness: CWE-284
- Published: 2022-01-13

## Affected versions

- Zabbix Frontend: affected 5.4.0 - 5.4.8; fixed in >= 5.4.9 and < 5.4.9*

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://support.zabbix.com/browse/ZBX-20384
- [advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6SZYHXINBKCY42ITFSNCYE7KCSF33VRA/
- [advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VB6W556GVXOKUYTASTDGL3AI7S3SJHX7/
- [other] https://lists.debian.org/debian-lts-announce/2022/02/msg00008.html
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23134

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.