CVE-2022-23132: Fedoraproject Fedora

High severity, CVSS 7.3. EPSS: 0.8% chance of exploitation in the next 30 days.

During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only
• Zabbix Zabbix: from 4.0.0, up to and including 4.0.36; from 5.0.0, up to and including 5.0.18; from 5.4.0, up to and including 5.4.8; version 6.0.0 only

Published 2022-01-13. Last modified 2026-06-17.