LDAP Binding Password Exposure in Zabbix
CVE-2025-27231

4.3MEDIUM

Key Information:

Vendor

Zabbix

Status
Zabbix
Vendor
CVE Published:
3 October 2025

What is CVE-2025-27231?

A vulnerability in Zabbix allows a Super Admin account to leak the LDAP 'Bind password' when the 'Host' is altered to point to an unauthorized LDAP server. This could lead to exposure of sensitive authentication credentials. To enhance security, the system now resets the 'Bind password' whenever the 'Host' is changed, mitigating potential risks of password leakage.

Affected Version(s)

Zabbix 6.0.0 <= 6.0.40

Zabbix 7.0.0 <= 7.0.17

Zabbix 7.2.0 <= 7.2.11

References

https://support.zabbix.com/browse/ZBX-27062

CVSS V4

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Zabbix wants to thank Vladislav Volozhenko for finding and reporting this issue.
JSON
.
CVE-2025-27231 : LDAP Binding Password Exposure in Zabbix