CVE-2025-32916
1
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
Summary
Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Checkmk GmbH | Checkmk | 2.4.0 < 2.4.0p13 | affected |
| Checkmk GmbH | Checkmk | 2.3.0 < 2.3.0p38 | affected |
| Checkmk GmbH | Checkmk | 2.2.0 < 2.2.0p46 | affected |
| Checkmk GmbH | Checkmk | 2.1.0 | affected |
Weaknesses
- CWE-598: CWE-598: Use of GET Request Method With Sensitive Query Strings
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.