NetSight
high7.5

CVE-2025-1075

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p27, <2.2.0p40, and 2.1.0p51 (EOL) causes LDAP credentials to be writ…

Impact

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p27, <2.2.0p40, and 2.1.0p51 (EOL) causes LDAP credentials to be written to Apache error log file accessible to administrators.

Affected products

VendorProductAffected versions
CheckmkCheckmk
before 2.1.0
Versions 2.1.0, 2.2.0, 2.3.0

Weakness classification

References