CVE-2025-32916 — Sensitive form data in URL query parameters

CVE-2025-32916

Sensitive form data in URL query parameters PUBLISHED

Description (CNA)

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.

Affected (CNA)

Vendor / product	Versions
Checkmk GmbH / Checkmk	affected 2.4.0 before 2.4.0p13; affected 2.3.0 before 2.3.0p38; affected 2.2.0 before 2.2.0p46; affected 2.1.0

CWE

CWE-598

References

https://checkmk.com/werk/17105

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.