Okta LDAP Bind PWD Leak via Host Change
CVE-2025-27231 Published on October 3, 2025

LDAP 'Bind password' field value can be leaked by a Zabbix Super Admin
The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change.

NVD

Vulnerability Analysis

Attack Vector:

ADJACENT

Attack Complexity:

LOW

Privileges Required:

HIGH

User Interaction:

NONE

Weakness Type

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Products Associated with CVE-2025-27231

Want to know whenever a new CVE is published for Zabbix? stack.watch will email you.

Zabbix

Affected Versions

Zabbix:

Version 6.0.0, <= 6.0.40 is affected.
Version 7.0.0, <= 7.0.17 is affected.
Version 7.2.0, <= 7.2.11 is affected.
Version 7.4.0, <= 7.4.1 is affected.

Exploit Probability

EPSS

0.39%

Percentile

31.51%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.