VULNERABILITY INTELLIGENCE

CVE-2025-27231

CVSS score4.9 MEDIUM
EPSS probability0.46%
CISA KEVNot currently listed
Published2025-10-03
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change.

Weakness classification

  • security@zabbix.com: CWE-522

Primary references