CVE-2013-1364: Zabbix

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

The user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers to override LDAP configuration via the cnf parameter.

Affected products

• Zabbix Zabbix: up to and including 1.8.15; version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only

Published 2013-12-14. Last modified 2026-06-16.