Zabbix Authentication Bypass

Zabbix is an open-source monitoring software tool that can be used to monitor a variety of IT components such as networks, servers, virtual machines, and cloud services.In zabbix.php?action=dashboard.view&dashboardid=1, an error was discovered through version 4.4 of Zabbix. An attacker can access the dashboard page without login credentials, and then can create a dashboard, report, screen, or map anonymously. Other users and an admin have access to all created elements (Dashboard/Report/Screen/Map).

Mitigation / Precaution

• We suggest you update Zabbix to a version greater than 4.4 in order to fix this vulnerability.

Written by

Sooraj V Nair

Cyber Security Engineer

Sooraj was probably the kid who opened up a remote control just to see what was inside, then had to figure out how to put it back together before anyone noticed. That curiosity eventually found its way into cybersecurity, where breaking things is actually part of the job description. Today, he explores vulnerabilities, analysis threats, and helps build safer digital spaces. His favourite question remains the same: “What happens if I try this?”