← Database

CVE-2025-27231

MEDIUM CVSS: 4.9 Published: 2025-10-03 Modified: 2026-06-17

Description

The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change.

Affected Platforms

Zabbix Zabbix

Weakness Type

CWE-522

References