low3.5Public exploit code
CVE-2013-5572
Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldap_bind_password va…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zabbix 2.0.5 - Cleartext ldap_bind_Password Password Disclosure (Metasploit)2015-02-23 · webapps · php
Impact
Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldap_bind_password value in the HTML source code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zabbix | Zabbix | Version 2.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2013-09/0149.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132376.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132377.html
- http://archives.neohapsis.com/archives/fulldisclosure/2013-09/0149.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132376.html
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/132377.html