PT-2025-41387 · Checkmk Gmbh+3 · Checkmk

Published 2025-10-09 · Updated 2025-10-09 · CVE-2025-32916

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Checkmk versions prior to 2.4.0p13 Checkmk versions prior to 2.3.0p38 Checkmk versions prior to 2.2.0p46 Checkmk version 2.1.0

Description Sensitive form data may be included in URL query parameters during GET requests. This can lead to the exposure of sensitive information in browser histories or web server logs.

Recommendations Update to version 2.4.0p13 or later. Update to version 2.3.0p38 or later. Update to version 2.2.0p46 or later. Update to a supported version, as version 2.1.0 has reached End of Life (EOL).

Fix

Weakness Enumeration

CWE-598

Related Identifiers

CVE-2025-32916

Affected Products

Checkmk

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-32916 · Security Note
• https://ubuntu.com/security/CVE-2025-32916 · Vendor Advisory
• https://checkmk.com/werk/17105 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-32916 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-32916 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-32916 · Security Note