Catch up on the latest product updates, best practices, and expert insights from the Checkmk Conference #12 – Watch the livestream recordings now
back to website

Werk #13722: Don't return passwords

Component REST API
Title Don't return passwords
Date Feb 15, 2022
Level Trivial Change
Class Security Fix
Compatibility Incompatible - Manual interaction might be required
Checkmk versions & editions
2.1.0b1 Checkmk Community, Checkmk Pro, Checkmk Ultimate MT
2.0.0p21 Checkmk Community, Checkmk Pro, Checkmk Ultimate MT

Before this werk it was possible to retrieve stored passwords in cleartext over the REST API. They are not shown in the GUI and should not be revealed to a user.

A Checkmk admin can still retrieve the password with access to the filesystem though.

To the list of all Werks