CVEvulnerability

CVE-2014-1682

4.0 MEDIUM Published 2014-05-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-05-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-287

Description

The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.

Affected configurations

• zabbix zabbix (<= 1.8.19) • zabbix zabbix 1.8 • zabbix zabbix 1.8.1 • zabbix zabbix 1.8.2 • zabbix zabbix 1.8.3 • zabbix zabbix 1.8.15 • zabbix zabbix 1.8.16 • zabbix zabbix 1.8.18 • zabbix zabbix 2.0.0 • zabbix zabbix 2.0.1 • zabbix zabbix 2.0.2 • zabbix zabbix 2.0.3 • zabbix zabbix 2.0.4 • zabbix zabbix 2.0.5 • zabbix zabbix 2.0.6 • zabbix zabbix 2.0.7 • zabbix zabbix 2.0.8 • zabbix zabbix 2.0.9 • zabbix zabbix 2.0.10 • zabbix zabbix 2.2.0 • zabbix zabbix 2.2.1 • fedoraproject fedora 19 • fedoraproject fedora 20

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References