CVE:CVE-2020-11800
CNNVD:CNNVD-202005-1106
Zabbix SIA Zabbix是拉脱维亚Zabbix SIA公司的一套开源的监控系统。该系统支持网络监控、服务器监控、云监控和应用监控等。
Zabbix SIA zabbix3-proxy 3.0.31之前版本和zabbix3-server 3.0.31之前版本中存在安全漏洞。攻击者可利用该漏洞执行任意代码/命令。
solution:Upgrade zabbix zabbix to a higher version than 3.0.31,3.2.0,and avoid the version [2.2.0,3.0.31),3.2.0; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,15.0:sp2,and avoid the version 15.0:sp1,15.0:sp2; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0