← volver
CVE-2025-27231

LDAP 'Bind password' field value can be leaked by a Zabbix Super Admin

CVSS 4.3 MEDIUMEPSS 0.4%CWE-522
The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change.
CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
Productos afectados
Zabbix · Zabbix

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →