CVE catalog

CVE-2023-32723

zabbix: CVE-2023-32723

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.67% · Oct 25, 2026

Request to LDAP is sent before user permissions are checked.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianzabbixsid1:7.0.29+dfsg-2fixed
Debianzabbixforky1:7.0.29+dfsg-2fixed
Debianzabbixtrixie1:7.0.22+dfsg-1~deb13u1fixed
Debianzabbixbookworm1:6.0.14+dfsg-1fixed
Ubuntuzabbixpro1:4.0.4+dfsg-1build2vulnerable
Ubuntuzabbixpro1:4.0.4+dfsg-1build3vulnerable
Ubuntuzabbixpro1:4.0.11+dfsg-1vulnerable
Ubuntuzabbixpro1:4.0.14+dfsg-1vulnerable
Ubuntuzabbixpro1:4.0.15+dfsg-1vulnerable
Ubuntuzabbixpro1:4.0.16+dfsg-1vulnerable
Ubuntuzabbixpro1:4.0.16+dfsg-1build1vulnerable
Ubuntuzabbixpro1:4.0.17+dfsg-1vulnerable
Ubuntuzabbixpro1:4.0.17+dfsg-1ubuntu0.1~esm1vulnerable
Ubuntuzabbixpro1:4.0.17+dfsg-1ubuntu0.1~esm2vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianzabbixsourcesid1:5.0.0+dfsg-1not yet assignedNot reported[1053877]
Debianzabbixsourceforky1:5.0.0+dfsg-1not yet assignedNot reported[1053877]
Debianzabbixsourcetrixie1:5.0.0+dfsg-1not yet assignedNot reported[1053877]
Debianzabbixsourcebookworm1:5.0.0+dfsg-1not yet assignedNot reported[1053877]

[Debian bug #1053877]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]