CVE-2022-23131

Name	CVE-2022-23131
Description	In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user (or use the guest account, which is disabled by default).
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
zabbix (PTS)	buster	1:4.0.4+dfsg-1	fixed
	buster (security)	1:4.0.4+dfsg-1+deb10u4	fixed
	bullseye	1:5.0.8+dfsg-1	fixed
	bookworm	1:6.0.14+dfsg-1	fixed
	sid	1:6.0.25+dfsg-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
zabbix	source	(unstable)	(not affected)

Notes

- zabbix <not-affected> (Only affects 5.4 and later)
https://support.zabbix.com/browse/ZBX-20350
Only affects 5.4 and later per https://www.zabbix.com/de/security_advisories