CVE-2022-46768 - Vulnerability Details - OpenCVE

Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.03607.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Zabbix Subscribe	Web Service Report Generation Subscribe Zabbix-agent2 Subscribe

Configuration 1 [-]

OR	cpe:2.3:a:zabbix:web_service_report_generation::::::::
	cpe:2.3:a:zabbix:web_service_report_generation::::::::
	cpe:2.3:a:zabbix:zabbix-agent2::::::::
	cpe:2.3:a:zabbix:zabbix-agent2::::::::

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2022-49551	Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files.

Fixes

Solution

To remediate this vulnerability, apply updates to the appropriate products or use the workaround

Workaround

If an immediate update is not possible, limit network access to Zabbix Web Service Report Generation.

References

Link	Providers
https://support.zabbix.com/browse/ZBX-22087

History

Wed, 16 Apr 2025 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Zabbix

Published: 2022-12-19T10:00:14.221Z

Updated: 2025-04-16T13:50:46.579Z

Reserved: 2022-12-07T00:00:00.000Z

Link: CVE-2022-46768

Vulnrichment

Updated: 2024-08-03T14:39:38.708Z

NVD

Status : Modified

Published: 2022-12-15T07:15:09.733

Modified: 2024-11-21T07:31:01.430

Link: CVE-2022-46768

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-20

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-46768", "assignerOrgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "assignerShortName": "Zabbix", "datePublished": "2022-12-19T10:00:14.221Z", "dateUpdated": "2025-04-16T13:50:46.579Z", "dateReserved": "2022-12-07T00:00:00.000Z"}, "containers": {"cna": {"title": "File name information disclosure vulnerability in Zabbix Web Service Report Generation", "datePublic": "2022-09-21T00:00:00.000Z", "providerMetadata": {"orgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "shortName": "Zabbix", "dateUpdated": "2022-12-15T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files."}], "affected": [{"vendor": "Zabbix", "product": "Web Service Report Generation", "versions": [{"version": "6.0.0-6.0.11", "status": "affected"}, {"version": "6.2.0-6.2.5", "status": "affected"}]}, {"vendor": "Zabbix", "product": "Zabbix agent 2 (MSI packages)", "versions": [{"version": "6.0.12rc1", "status": "unaffected", "lessThan": "unspecified", "versionType": "custom"}, {"version": "6.2.6rc1", "status": "unaffected", "lessThan": "unspecified", "versionType": "custom"}]}], "references": [{"url": "https://support.zabbix.com/browse/ZBX-22087"}], "credits": [{"lang": "en", "value": "Trend Micro ZDI"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-20 Improper Input Validation", "cweId": "CWE-20"}]}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "source": {"discovery": "EXTERNAL"}, "workarounds": [{"lang": "en", "value": "If an immediate update is not possible, limit network access to Zabbix Web Service Report Generation."}], "solutions": [{"lang": "en", "value": "To remediate this vulnerability, apply updates to the appropriate products or use the workaround"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T14:39:38.708Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.zabbix.com/browse/ZBX-22087", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-16T13:48:48.470889Z", "id": "CVE-2022-46768", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-16T13:50:46.579Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://support.zabbix.com/browse/ZBX-22087", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T14:39:38.708Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-46768", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-16T13:48:48.470889Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-16T13:49:13.890Z"}}], "cna": {"title": "File name information disclosure vulnerability in Zabbix Web Service Report Generation", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "value": "Trend Micro ZDI"}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Zabbix", "product": "Web Service Report Generation", "versions": [{"status": "affected", "version": "6.0.0-6.0.11"}, {"status": "affected", "version": "6.2.0-6.2.5"}]}, {"vendor": "Zabbix", "product": "Zabbix agent 2 (MSI packages)", "versions": [{"status": "unaffected", "version": "6.0.12rc1", "lessThan": "unspecified", "versionType": "custom"}, {"status": "unaffected", "version": "6.2.6rc1", "lessThan": "unspecified", "versionType": "custom"}]}], "solutions": [{"lang": "en", "value": "To remediate this vulnerability, apply updates to the appropriate products or use the workaround"}], "datePublic": "2022-09-21T00:00:00.000Z", "references": [{"url": "https://support.zabbix.com/browse/ZBX-22087"}], "workarounds": [{"lang": "en", "value": "If an immediate update is not possible, limit network access to Zabbix Web Service Report Generation."}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "descriptions": [{"lang": "en", "value": "Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "shortName": "Zabbix", "dateUpdated": "2022-12-15T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2022-46768", "state": "PUBLISHED", "dateUpdated": "2025-04-16T13:50:46.579Z", "dateReserved": "2022-12-07T00:00:00.000Z", "assignerOrgId": "72de3e22-0555-4a0d-ae81-9249e0f0a1e8", "datePublished": "2022-12-19T10:00:14.221Z", "assignerShortName": "Zabbix"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:zabbix:web_service_report_generation:*:*:*:*:*:*:*:*", "matchCriteriaId": "BBB67084-E76A-4DAC-9792-69CAA171EC72", "versionEndIncluding": "6.0.11", "versionStartIncluding": "6.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:web_service_report_generation:*:*:*:*:*:*:*:*", "matchCriteriaId": "A91392BD-965F-4BAF-BCD0-A447CEDCB2E6", "versionEndIncluding": "6.2.5", "versionStartIncluding": "6.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix-agent2:*:*:*:*:*:*:*:*", "matchCriteriaId": "F9D0A845-E989-4358-AFC9-E309203B2EBD", "versionEndExcluding": "6.0.12", "vulnerable": true}, {"criteria": "cpe:2.3:a:zabbix:zabbix-agent2:*:*:*:*:*:*:*:*", "matchCriteriaId": "B8B711CD-F826-46D0-AD7C-DCAF85F594E9", "versionEndExcluding": "6.2.6", "versionStartIncluding": "6.2.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files."}, {"lang": "es", "value": "Existe una vulnerabilidad de lectura arbitraria de archivos en la generaci\u00f3n de informes del servicio web Zabbix, que escucha en el puerto 10053. El servicio no tiene una validaci\u00f3n adecuada de los par\u00e1metros de URL antes de leer los archivos."}], "id": "CVE-2022-46768", "lastModified": "2024-11-21T07:31:01.430", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "security@zabbix.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-12-15T07:15:09.733", "references": [{"source": "security@zabbix.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://support.zabbix.com/browse/ZBX-22087"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://support.zabbix.com/browse/ZBX-22087"}], "sourceIdentifier": "security@zabbix.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "security@zabbix.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}