CVE-2025-27231 — LDAP 'Bind password' field value can be leaked by a Zabbix Super Admin
The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind pas…
Published: 2025-10-03 · CVSS: 4.3 · CVSS 4.0
The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7