Explore the latest product updates and best practices at our hybrid Checkmk Conference #12 from June 16-18, 2026 – Register here

Werk #13722: Don't return passwords

Component REST API
Title Don't return passwords
Date Feb 15, 2022
Level Trivial Change
Class Security Fix
Compatibility Incompatible - Manual interaction might be required
Checkmk versions & editions
2.1.0b1 Checkmk Community, Checkmk Pro, Checkmk Ultimate MT
2.0.0p21 Checkmk Community, Checkmk Pro, Checkmk Ultimate MT

Before this werk it was possible to retrieve stored passwords in cleartext over the REST API. They are not shown in the GUI and should not be revealed to a user.

A Checkmk admin can still retrieve the password with access to the filesystem though.

To the list of all Werks