The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text.
Weakness
The product stores a password in plaintext within resources such as memory or files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Zabbix | Zabbix | 5.0.0 (including) | 5.0.42 (including) |
| Zabbix | Zabbix | 6.0.0 (including) | 6.0.30 (including) |
| Zabbix | Zabbix | 6.4.0 (including) | 6.4.15 (including) |
| Zabbix | Zabbix | 7.0.0 (including) | 7.0.0 (including) |
| Zabbix | Ubuntu | focal | * |
| Zabbix | Ubuntu | oracular | * |
| Zabbix | Ubuntu | plucky | * |
| Zabbix | Ubuntu | trusty/esm | * |