Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.
References
| Link | Resource |
|---|---|
| https://checkmk.com/werk/17105 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Oct 2026, 22:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) Uso potencial de información sensible en solicitudes GET en las versiones de Checkmk GmbH anterior a 2.4.0p13, anterior a 2.3.0p38, anterior a 2.2.0p46 y 2.1.0 (EOL) puede causar que datos sensibles de formularios se incluyan en los parámetros de consulta de URL, lo que puede ser registrado en varios lugares como el historial del navegador o los registros del servidor web. |
19 Oct 2026, 16:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
Information
Published : 2025-10-09 15:16
Updated : 2026-10-23 22:10
NVD link : CVE-2025-32916
Mitre link : CVE-2025-32916
CVE.ORG link : CVE-2025-32916
JSON object : View
Products Affected
checkmk
- checkmk
CWE
CWE-598
Use of HTTP Request With Sensitive Query String
