| Package | Affected versions | Patched versions |
|---|---|---|
| zabbix | ≥ 6.0.0, < 6.0.41≥ 7.0.0, < 7.0.18≥ 7.2.0, < 7.2.12≥ 7.4.0, < 7.4.2 | 6.0.417.0.187.2.127.4.2 |
The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free