PT-2025-40512 · Ldap+2 · Ldap+2

Vladislav Volozhenko · Published 2025-10-03 · Updated 2025-11-05 · CVE-2025-27231

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:N/AC:L/Au:M/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Versions prior to the fix where the 'Bind password' value is reset on 'Host' change.

Description A Super Admin account can potentially leak the LDAP 'Bind password' value by changing the LDAP 'Host' to a rogue LDAP server. The 'Bind password' value cannot be read after saving, but this manipulation allows unauthorized access. The issue is mitigated by resetting the 'Bind password' value when the 'Host' is changed.

Recommendations Ensure the 'Bind password' value is reset on 'Host' change.

Fix

Information Disclosure

Insufficiently Protected Credentials

Weakness Enumeration

CWE-200

CWE-522

Related Identifiers

BDU:2025-13818

CVE-2025-27231

Affected Products

Debian

Ldap

Red Os

References · 15

• https://security-tracker.debian.org/tracker/CVE-2025-27231 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-27231 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13818 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-27231 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-27231 · Security Note
• https://support.zabbix.com/browse/ZBX-27062 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-27231 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-27231 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-27231 · Vendor Advisory
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-zabbix-lts-agent2-plugin-mongodb-cve-2025-27236-cve-2025-49641-cve-2025-2 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-zabbix-lts-agent-cve-2025-27236-cve-2025-49641-cve-2025-27231/?sphrase_id=1339052 · Note
• https://twitter.com/CVEnew/status/1974076237287993519 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-zabbix-lts-agent2-plugin-mssql-cve-2025-27236-cve-2025-49641-cve-2025-272 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-zabbix-lts-agent2-plugin-postgresql-cve-2025-27236-cve-2025-49641-cve-202 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-zabbix-lts-agent-cve-2025-27236-cve-2025-49641-cve-2025-27231 · Note