CVEvulnerability

CVE-2025-32916

1.0 LOW Published 2025-10-09 Modified 2026-10-23 Official page ↗
Status
Analyzed
Published
2025-10-09
Last modified
2026-10-23
Assigner
[email protected]
CVSS 4.0 ([email protected])
1.0 LOW — CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Weaknesses
CWE-598

Description

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.

Affected configurations

• checkmk checkmk (>= 2.1.0 < 2.2.0) • checkmk checkmk 2.2.0 • checkmk checkmk 2.3.0 • checkmk checkmk 2.4.0

Related

Weakness · CWE (1)

  • CWE-598 Use of HTTP Request With Sensitive Query String weakness

References