Zabbix Web Interface Default Administrator Credentials

high Nessus Plugin ID 70838


A web application is protected using default administrative credentials.


The remote Zabbix Web Interface uses a default set of credentials ('Admin' / 'zabbix') to control access to its management interface.

With this information, an attacker can gain administrative access to the application.


Log into the application and change the default login credentials.

Plugin Details

Severity: High

ID: 70838

File Name: zabbix_frontend_default_credentials.nasl

Version: 1.7

Type: remote

Family: CGI abuses

Published: 11/11/2013

Updated: 4/11/2022

Configuration: Enable thorough checks

Risk Information


Risk Factor: High

Base Score: 7.5

Temporal Score: 7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: E:H/RL:ND/RC:ND

Vulnerability Information

CPE: cpe:/a:zabbix:zabbix

Required KB Items: www/zabbix

Excluded KB Items: global_settings/supplied_logins_only