During Zabbix installation from RPM, DAC_OVERRIDE SELinux capability is in use to access PID files in [/var/run/zabbix] folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level References: https://support.zabbix.com/browse/ZBX-20341
Created zabbix tracking bugs for this issue: Affects: fedora-all [bug 2040755] Created zabbix40 tracking bugs for this issue: Affects: epel-all [bug 2040756] Created zabbix50 tracking bugs for this issue: Affects: epel-all [bug 2040757]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.