CVE-2025-1075: LDAP credentials logged to Apache error log
Published Feb 19, 2025
·Updated
Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p27, <2.2.0p40, and 2.1.0p51 (EOL) causes LDAP credentials to be written to Apache error log file accessible to administrators.
Affected Software
144 affected components
Checkmk GmbH Checkmk<2.3.0p27, <2.2.0p40
Checkmk Checkmk<2.1.0
Checkmk Checkmk=2.1.0
Checkmk Checkmk=2.1.0-b1
Checkmk Checkmk=2.1.0-b2
Checkmk Checkmk=2.1.0-b3
Checkmk Checkmk=2.1.0-b4
Checkmk Checkmk=2.1.0-b5
Checkmk Checkmk=2.1.0-b6
Checkmk Checkmk=2.1.0-b7
Checkmk Checkmk=2.1.0-b8
Checkmk Checkmk=2.1.0-b9
Checkmk Checkmk=2.1.0-p1
Checkmk Checkmk=2.1.0-p10
Checkmk Checkmk=2.1.0-p11
Checkmk Checkmk=2.1.0-p12
Checkmk Checkmk=2.1.0-p13
Checkmk Checkmk=2.1.0-p14
Checkmk Checkmk=2.1.0-p15
Checkmk Checkmk=2.1.0-p16
Checkmk Checkmk=2.1.0-p17
Checkmk Checkmk=2.1.0-p18
Checkmk Checkmk=2.1.0-p19
Checkmk Checkmk=2.1.0-p2
Checkmk Checkmk=2.1.0-p20
Checkmk Checkmk=2.1.0-p21
Checkmk Checkmk=2.1.0-p22
Checkmk Checkmk=2.1.0-p23
Checkmk Checkmk=2.1.0-p24
Checkmk Checkmk=2.1.0-p25
Checkmk Checkmk=2.1.0-p26
Checkmk Checkmk=2.1.0-p27
Checkmk Checkmk=2.1.0-p28
Checkmk Checkmk=2.1.0-p29
Checkmk Checkmk=2.1.0-p3
Checkmk Checkmk=2.1.0-p30
Checkmk Checkmk=2.1.0-p31
Checkmk Checkmk=2.1.0-p32
Checkmk Checkmk=2.1.0-p33
Checkmk Checkmk=2.1.0-p34
Checkmk Checkmk=2.1.0-p35
Checkmk Checkmk=2.1.0-p36
Checkmk Checkmk=2.1.0-p37
Checkmk Checkmk=2.1.0-p38
Checkmk Checkmk=2.1.0-p39
Checkmk Checkmk=2.1.0-p4
Checkmk Checkmk=2.1.0-p40
Checkmk Checkmk=2.1.0-p41
Checkmk Checkmk=2.1.0-p42
Checkmk Checkmk=2.1.0-p43
Checkmk Checkmk=2.1.0-p44
Checkmk Checkmk=2.1.0-p45
Checkmk Checkmk=2.1.0-p46
Checkmk Checkmk=2.1.0-p47
Checkmk Checkmk=2.1.0-p48
Checkmk Checkmk=2.1.0-p49
Checkmk Checkmk=2.1.0-p5
Checkmk Checkmk=2.1.0-p50
Checkmk Checkmk=2.1.0-p6
Checkmk Checkmk=2.1.0-p7
Checkmk Checkmk=2.1.0-p8
Checkmk Checkmk=2.1.0-p9
Checkmk Checkmk=2.2.0
Checkmk Checkmk=2.2.0-b1
Checkmk Checkmk=2.2.0-b2
Checkmk Checkmk=2.2.0-b3
Checkmk Checkmk=2.2.0-b4
Checkmk Checkmk=2.2.0-b5
Checkmk Checkmk=2.2.0-b6
Checkmk Checkmk=2.2.0-b7
Checkmk Checkmk=2.2.0-b8
Checkmk Checkmk=2.2.0-i1
Checkmk Checkmk=2.2.0-p1
Checkmk Checkmk=2.2.0-p10
Checkmk Checkmk=2.2.0-p11
Checkmk Checkmk=2.2.0-p12
Checkmk Checkmk=2.2.0-p13
Checkmk Checkmk=2.2.0-p14
Checkmk Checkmk=2.2.0-p15
Checkmk Checkmk=2.2.0-p16
Checkmk Checkmk=2.2.0-p17
Checkmk Checkmk=2.2.0-p18
Checkmk Checkmk=2.2.0-p19
Checkmk Checkmk=2.2.0-p2
Checkmk Checkmk=2.2.0-p20
Checkmk Checkmk=2.2.0-p21
Checkmk Checkmk=2.2.0-p22
Checkmk Checkmk=2.2.0-p23
Checkmk Checkmk=2.2.0-p24
Checkmk Checkmk=2.2.0-p25
Checkmk Checkmk=2.2.0-p26
Checkmk Checkmk=2.2.0-p27
Checkmk Checkmk=2.2.0-p28
Checkmk Checkmk=2.2.0-p29
Checkmk Checkmk=2.2.0-p3
Checkmk Checkmk=2.2.0-p30
Checkmk Checkmk=2.2.0-p31
Checkmk Checkmk=2.2.0-p32
Checkmk Checkmk=2.2.0-p33
Checkmk Checkmk=2.2.0-p34
Checkmk Checkmk=2.2.0-p35
Checkmk Checkmk=2.2.0-p36
Checkmk Checkmk=2.2.0-p37
Checkmk Checkmk=2.2.0-p38
Checkmk Checkmk=2.2.0-p39
Checkmk Checkmk=2.2.0-p4
Checkmk Checkmk=2.2.0-p5
Checkmk Checkmk=2.2.0-p6
Checkmk Checkmk=2.2.0-p7
Checkmk Checkmk=2.2.0-p8
Checkmk Checkmk=2.2.0-p9
Checkmk Checkmk=2.3.0
Checkmk Checkmk=2.3.0-b1
Checkmk Checkmk=2.3.0-b2
Checkmk Checkmk=2.3.0-b3
Checkmk Checkmk=2.3.0-b4
Checkmk Checkmk=2.3.0-b5
Checkmk Checkmk=2.3.0-b6
Checkmk Checkmk=2.3.0-p1
Checkmk Checkmk=2.3.0-p10
Checkmk Checkmk=2.3.0-p11
Checkmk Checkmk=2.3.0-p12
Checkmk Checkmk=2.3.0-p13
Checkmk Checkmk=2.3.0-p14
Checkmk Checkmk=2.3.0-p15
Checkmk Checkmk=2.3.0-p16
Checkmk Checkmk=2.3.0-p17
Checkmk Checkmk=2.3.0-p18
Checkmk Checkmk=2.3.0-p19
Checkmk Checkmk=2.3.0-p2
Checkmk Checkmk=2.3.0-p20
Checkmk Checkmk=2.3.0-p21
Checkmk Checkmk=2.3.0-p22
Checkmk Checkmk=2.3.0-p23
Checkmk Checkmk=2.3.0-p24
Checkmk Checkmk=2.3.0-p25
Checkmk Checkmk=2.3.0-p26
Checkmk Checkmk=2.3.0-p3
Checkmk Checkmk=2.3.0-p4
Checkmk Checkmk=2.3.0-p5
Checkmk Checkmk=2.3.0-p6
Checkmk Checkmk=2.3.0-p7
Checkmk Checkmk=2.3.0-p8
Checkmk Checkmk=2.3.0-p9
Event History
Feb 19, 2025
CVE Published
via MITRE·09:49 AM
Data Sourced
via MITRE·09:49 AM
DescriptionWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-1075?
CVE-2025-1075 is considered a medium severity vulnerability due to the exposure of sensitive LDAP credentials.
2
How do I fix CVE-2025-1075?
To fix CVE-2025-1075, update Checkmk to a version greater than 2.3.0p27, 2.2.0p40, or 2.1.0p51.
3
What versions are affected by CVE-2025-1075?
CVE-2025-1075 affects Checkmk versions earlier than 2.3.0p27, 2.2.0p40, and 2.1.0p51.
4
What is the impact of CVE-2025-1075?
The impact of CVE-2025-1075 is the potential unauthorized access to sensitive LDAP credentials logged in Apache error files.
5
Who is affected by CVE-2025-1075?
Administrators of Checkmk versions prior to the specified updates are at risk due to CVE-2025-1075.