Forums

Home / Forums

You need to log in to create posts and topics. Login · Register

Security related package issue

Good morning,

I am in the process of updating our systems to the newest version of Petasan. We use Rapid7's Nexpose software for vulnerability scanning.

We are getting that a package in a fully updated system being vulnerable to an exploitable version of Zabbix:
Vulnerable software installed: Ubuntu zabbix-agent 1:4.0.17+dfsg-1

The CVE for this vulnerability is at https://nvd.nist.gov/vuln/detail/CVE-2020-15803

Is this package necessary for the operation of Petasan?

 

Thanks,
Neil