Werk #5514: cmk-update-agent: Use POST-requests for server communications
| Component | Agent bakery | ||
| Title | cmk-update-agent: Use POST-requests for server communications | ||
| Date | Oct 11, 2018 | ||
| Level | Trivial Change | ||
| Class | Security Fix | ||
| Compatibility | Compatible - no manual interaction needed | ||
| Checkmk versions & editions |
|
The agent updater now uses POST requests for all communications to the Check_MK Server.
This improves security because all data, including sensitive data like login-credentials, are now sent within the HTTP-Body instead of within the URL. Notably, no sensitive data will ne exposed to the apache logfiles on the Check_MK server.
This Change is relevant for Check_MK 1.4 only, whereas the agent updater shiped with Check_MK 1.5 or newer has another code base that employs POST requests since its first release.