CVE-2013-5572

This Metasploit auxiliary module exploits an information disclosure vulnerability in Zabbix 2.0.5, where authenticated users can extract LDAP bind credentials from the HTML source code of the authentication page. It requires a valid session cookie to access the management console and parse sensitive fields like ldap_bind_password.