VULNERABILITY INTELLIGENCE

CVE-2017-2826

CVSS score3.7 LOW

EPSS probability3.27%

CISA KEVNot currently listed

Published2018-04-09

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted iConfig proxy request can cause the Zabbix server to send the configuration information of any Zabbix proxy, resulting in information disclosure. An attacker can make requests from an active Zabbix proxy to trigger this vulnerability.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

talos-cna@cisco.com — Mailing List, Third Party Advisory
talos-cna@cisco.com — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory