[Git][security-tracker-team/security-tracker][master] CVE-2022-46768/zabbix does not affect bullseye and buster, vulnerable feature...

[Tobias Frost (@tobi)]

Tobias Frost pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ca530a19 by Tobias Frost at 2023-04-10T17:44:12+02:00
CVE-2022-46768/zabbix does not affect bullseye and buster, vulnerable feature introduced in 5.4.0 only.

Vulnerable feature ticket: https://support.zabbix.com/browse/ZBXNEXT-6478

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29431,8 +29431,10 @@ CVE-2022-4341 (A vulnerability has been found in csliuwy coder-chain_gdut and cl
 	NOT-FOR-US: csliuwy coder-chain_gdut
 CVE-2022-46768 (Arbitrary file read vulnerability exists in Zabbix Web Service Report  ...)
 	- zabbix 1:6.0.13+dfsg-1 (bug #1026847)
-	[bullseye] - zabbix <ignored> (Minor issue)
+	[bullseye] - zabbix <not-affected> (Vulnerable code introduced later.)
+	[buster] - zabbix <not-affected> (Vulnerable code introduced later.)
 	NOTE: https://support.zabbix.com/browse/ZBX-22087
+	NOTE: Vulnerable service introduced in 5.4.0 https://support.zabbix.com/browse/ZBXNEXT-6478
 CVE-2022-46767
 	RESERVED
 CVE-2022-46766



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ca530a19e63d397b8f2f5db0332c6fd53667ec29

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ca530a19e63d397b8f2f5db0332c6fd53667ec29
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230410/fbf0eae3/attachment.htm>