CVE-2025-27231

MediumCVSS 4.9

Published: 03/10/2025(UTC)Updated: 19/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

39th percentile - higher than 39% of all known CVEs

Summary

The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing the LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change.

Risk Assessment

A Super Admin account can leak the LDAP bind password by redirecting to a rogue server, potentially leading to credential compromise.

Recommendation

Apply the update that resets the bind password on LDAP host change and restrict Super Admin privileges to necessary personnel.

Other vulnerabilities in LDAP

CVE-2026-33609Medium
Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.

Original NVD description (English source)

The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS