Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-1199 →
DEBIAN-CVE-2026-1199
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counte...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, potentially allowing for more password guesses than intended.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
zabbix
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
zabbix
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
zabbix
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.29+dfsg-1"}]}]
Références
- advisory security-tracker.debian.org