CVE-2025-27231
LDAP 'Bind password' field value can be leaked by a Zabbix Super Admin
The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change.
CVSS:4.0/AV:A/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
Produtos afetados
Zabbix · ZabbixQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
https://support.zabbix.com/browse/ZBX-27062