CVE-2022-23134

CVE-2022-23134 is an authentication bypass vulnerability in Zabbix Frontend, affecting various Zabbix versions across Debian and Fedora distributions. It allows unauthenticated users to access and potentially alter Zabbix configuration steps after initial setup. With a CVSS score of 5.3 (MEDIUM), its low attack complexity and network-based vector enable unauthorized configuration changes, though without direct impact on confidentiality or availability. This vulnerability is actively exploited in the wild, as confirmed by its presence in CISA's KEV catalog and high EPSS score, despite a lack of public Metasploit or ExploitDB modules. Community discussion and media coverage indicate significant attention to this threat.