CVE-2025-32916: Sensitive form data in URL query parameters
Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32916?
CVE-2025-32916 is classified as a medium severity vulnerability due to the risk of sensitive information exposure.
How do I fix CVE-2025-32916?
To mitigate CVE-2025-32916, upgrade to Checkmk versions 2.4.0p13 or later, 2.3.0p38 or later, or 2.2.0p46 or later.
What software is affected by CVE-2025-32916?
CVE-2025-32916 affects Checkmk versions earlier than 2.4.0p13, 2.3.0p38, and 2.2.0p46.
What type of sensitive information is at risk in CVE-2025-32916?
CVE-2025-32916 may expose sensitive form data through URL query parameters in GET requests.
How can sensitive data from CVE-2025-32916 be compromised?
Sensitive data from CVE-2025-32916 can be compromised if it is logged in browser history or web server logs.