CVE-2025-11248: Sensitive Information Logged
ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ZohoCorp ManageEngine Endpoint Centralto a version that resolves this vulnerability.Fixed in 11.4.2528.05
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11248?
CVE-2025-11248 is considered a medium severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2025-11248?
To mitigate CVE-2025-11248, upgrade ZohoCorp ManageEngine Endpoint Central to version 11.4.2528.05 or later.
What type of information is exposed in CVE-2025-11248?
CVE-2025-11248 exposes sensitive agent tokens through logs accessible to authenticated users.
Who is affected by CVE-2025-11248?
CVE-2025-11248 affects authenticated users of ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05.
Is authentication required to exploit CVE-2025-11248?
Yes, an attacker must be an authenticated user to exploit the sensitive information logging issue in CVE-2025-11248.