Bug 1224447 (CVE-2024-22120) - VUL-0: CVE-2024-22120: zabbix: time based SQL injection in Zabbix Server audit log
Summary: VUL-0: CVE-2024-22120: zabbix: time based SQL injection in Zabbix Server audi...
Status: RESOLVED INVALID
Alias: CVE-2024-22120
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P5 - None : Critical
Target Milestone: ---
Assignee: 亚聃 范
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/406306/
Whiteboard: CVSSv3.1:SUSE:CVE-2024-22120:9.1:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2024-05-17 19:25 UTC by SMASH SMASH
Modified: 2024-05-18 16:32 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2024-05-17 19:25:22 UTC 
Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-22120
https://www.cve.org/CVERecord?id=CVE-2024-22120
https://support.zabbix.com/browse/ZBX-24505
Comment 1 Camila Camargo de Matos 2024-05-17 19:30:59 UTC 
It seems like Zabbix at versions below 5.0 are not affected by this issue, as the vulnerable function had not yet been introduced into the code (see [0] and [1] for more information).

As for package zabbix in openSUSE:Factory, it is at version 6.0.28, which already contains the fix for this issue (see the comments in [2] for more information).

Therefore, package zabbix is not affected in any codestreams.

[0] https://git.zabbix.com/projects/ZBX/repos/zabbix/commits/941917c7c
[1] https://support.zabbix.com/browse/ZBXNEXT-5847
[2] https://support.zabbix.com/browse/ZBX-24505