CVE-2025-1075 in Checkmk

Riassunto

di MITRE • 19/02/2025

Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p27, <2.2.0p40, and 2.1.0p51 (EOL) causes LDAP credentials to be written to Apache error log file accessible to administrators.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: Checkmk
• Prenotare: 06/02/2025
• Divulgazione: 19/02/2025
• Moderazione: accettato
• Voce: VDB-296277
• CPE: pronto
• CWE: CWE-532 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.00293
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-1075
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-1075
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-1075/