Security monitoring solution Zabbix - Revision history

Malyhass at 11:33, 31 May 2018

2018-05-31T11:33:22Z

2018-05-31T11:33:02Z

Security VS Vulnerabilities

← Older revision		Revision as of 14:33, 31 May 2018
Line 332:		Line 332:

	[[File:ZabbixpasswordPlaintext.png\|thumb\|center\| Zabbix Enable LDAP]]		[[File:ZabbixpasswordPlaintext.png\|thumb\|center\| Zabbix Enable LDAP]]


	[[File:ZabbixpasswordPlaintext2.png\|thumb\|center\| Zabbix LDAP passwords saved as a plain text]]		[[File:ZabbixpasswordPlaintext2.png\|thumb\|center\| Zabbix LDAP passwords saved as a plain text]]


			Downright dangerous, system administrator need to be aware when enable the LDAP in Zabbix server.

	=Summary=		=Summary=

2018-05-31T11:30:25Z

Security VS Vulnerabilities

← Older revision		Revision as of 14:30, 31 May 2018
Line 331:		Line 331:


	[[File:ZabbixpasswordPlaintext.png\|thumb\|center\| Zabbix LDAP passwords saved as a plain text]]		[[File:ZabbixpasswordPlaintext.png\|thumb\|center\| Zabbix Enable LDAP]]

			[[File:ZabbixpasswordPlaintext2.png\|thumb\|center\| Zabbix LDAP passwords saved as a plain text]]

	=Summary=		=Summary=

2018-05-31T11:28:03Z

Security VS Vulnerabilities

← Older revision		Revision as of 14:28, 31 May 2018
Line 325:		Line 325:
	<code> update zabbix.users set passwd=md5('VeryComplexp@ss0rd') where alias='Admin'; </code>		<code> update zabbix.users set passwd=md5('VeryComplexp@ss0rd') where alias='Admin'; </code>

	The attacker will not be able to obtain the password or even to crack it		The attacker will not be able to obtain the password or even to crack it.


			Another issue could cause a problem that when the solution administrator will enable the LDAP authentication the password will be saved in the Zabbix database as a plain text


			[[File:ZabbixpasswordPlaintext.png\|thumb\|center\| Zabbix LDAP passwords saved as a plain text]]

	=Summary=		=Summary=

2018-05-31T11:12:26Z

Security VS Vulnerabilities

← Older revision		Revision as of 14:12, 31 May 2018
Line 319:		Line 319:

	[[File:ZabbixpasswordCraked.png\|thumb\|center\| Zabbix password hash cracked]]		[[File:ZabbixpasswordCraked.png\|thumb\|center\| Zabbix password hash cracked]]

			<span style="color:#FF0000">
			Avoiding the issue by using strong complex password and administrator must update it every week

			<code> update zabbix.users set passwd=md5('VeryComplexp@ss0rd') where alias='Admin'; </code>

			The attacker will not be able to obtain the password or even to crack it

	=Summary=		=Summary=

2018-05-31T11:03:56Z

Security VS Vulnerabilities

← Older revision		Revision as of 14:03, 31 May 2018
Line 316:		Line 316:

	[[File:Zabbixpassword.png\|thumb\|center\| Zabbix setting the password]]		[[File:Zabbixpassword.png\|thumb\|center\| Zabbix setting the password]]


			[[File:ZabbixpasswordCraked.png\|thumb\|center\| Zabbix password hash cracked]]

	=Summary=		=Summary=

2018-05-31T11:02:23Z

Security VS Vulnerabilities

← Older revision		Revision as of 14:02, 31 May 2018
Line 315:		Line 315:
	<code> update zabbix.users set passwd=md5('verystrongpassword') where alias='Admin'; </code>		<code> update zabbix.users set passwd=md5('verystrongpassword') where alias='Admin'; </code>

	[[File:~~Screenshot~~\|thumb\|center\| Zabbix setting the password]]		[[File:Zabbixpassword.png\|thumb\|center\| Zabbix setting the password]]

	=Summary=		=Summary=

2018-05-31T11:01:07Z

Security VS Vulnerabilities

← Older revision		Revision as of 14:01, 31 May 2018
Line 309:		Line 309:

	[[File:Screenshot from.png\|thumb\|center\| Zabbix MySQL database]]		[[File:Screenshot from.png\|thumb\|center\| Zabbix MySQL database]]


			Setting the password for the administrator user

			<code> update zabbix.users set passwd=md5('verystrongpassword') where alias='Admin'; </code>

			[[File:Screenshot\|thumb\|center\| Zabbix setting the password]]

	=Summary=		=Summary=

2018-05-31T10:48:19Z

Security VS Vulnerabilities

← Older revision		Revision as of 13:48, 31 May 2018
Line 308:		Line 308:


	[[File:Screenshot from \|thumb\|center\| Zabbix MySQL database]]		[[File:Screenshot from.png\|thumb\|center\| Zabbix MySQL database]]

	=Summary=		=Summary=

2018-05-31T10:47:05Z

Security VS Vulnerabilities

← Older revision		Revision as of 13:47, 31 May 2018
Line 308:		Line 308:


	[[File:Screenshot from ~~2017-11-25 21-26-14.png~~\|thumb\|center\| Zabbix MySQL database]]		[[File:Screenshot from \|thumb\|center\| Zabbix MySQL database]]

	=Summary=		=Summary=