CVE-2025-11248 — Sensitive Information Logged

CVE-2025-11248

Sensitive Information Logged PUBLISHED

Description (CNA)

ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token.

Affected (CNA)

Vendor / product	Versions
Zohocorp / ManageEngine Endpoint Central	affected 0 before 11.4.2528.05

CWE

CWE-532

References

https://www.manageengine.com/products/desktop-central/CVE-2025-11248.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.