Werk #17089: Change Transaction ID Format
| Component | Setup | ||
| Title | Change Transaction ID Format | ||
| Date | Jun 21, 2024 | ||
| Level | Trivial Change | ||
| Class | Security Fix | ||
| Compatibility | Compatible - no manual interaction needed | ||
| Checkmk versions & editions |
|
This Werk changes the format of transaction IDs and the way they are generated.
Before this Werk transaction IDs used the format <unix timestamp>/<number>.
The new format is <unix timestamp>/<string>, where the string component can contain any URL-safe character.
Transaction IDs are now generated using a cryptographically secure random number generator.
This security Werk does not address any exploitable vulnerability.
To aid automated scanning we assign a CVSS score of 0.0 (None) (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N).