CVE-2025-2092

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p29, <2.2.0p41 and <=2.1.0p49 (EOL) causes remote site authentication secrets to be written to log files accessible to administrators.

Score

CVSS 3.1 7.5 High

Status

Analyzed - security@checkmk.com

Published

2025-04-22

Last modified

2025-04-22

Weaknesses

CWE-532

Affected products

• Checkmk (Checkmk)
• Checkmk (Checkmk Gmbh)

References

• https://checkmk.com/werk/17780