CVE-2025-2092
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Apr 22, 2025
Updated: Apr 23, 2025
Summary
CVE-2025-2092: A vulnerability has been identified in Checkmk GmbH's Checkmk versions below 2.3.0p29, 2.2.0p41, and <=2.1.0p49 (end-of-life). This issue permits the insertion of sensitive information, specifically remote site authentication secrets, into log files. Consequently, these log files, accessible to administrators, may expose these secrets, posing a significant security risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Samsung