VYPR
← All advisories
Unrated severityNVD Advisory· Published May 8, 2014· Updated May 6, 2026

CVE-2014-1682

CVE-2014-1682

Description

The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.

Affected products

46
  • Zabbix/Zabbix44 versions
    cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*+ 43 more
    • cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*range: <=1.8.19
    • cpe:2.3:a:zabbix:zabbix:1.8:*:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:1.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:1.8.15:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:1.8.16:*:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:1.8.18:*:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:1.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:1.8.3:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:1.8.3:rc2:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:1.8.3:rc3:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.0:rc3:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.0:rc4:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.0:rc5:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.0:rc6:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.10:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.1:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.1:rc2:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.2:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.2:rc2:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.3:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.3:rc2:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.4:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.5:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.6:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.7:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.8:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.8:rc2:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.9:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.0.9:rc2:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.2.0:-:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.2.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.2.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.2.1:-:*:*:*:*:*:*
    • cpe:2.3:a:zabbix:zabbix:2.2.1:rc1:*:*:*:*:*:*
  • Fedoraproject/Fedora2 versions
    cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.