Sensitive Information Logging Vulnerability in ZohoCorp ManageEngine Endpoint Central

CVE-2025-11248

What is CVE-2025-11248?

ZohoCorp's ManageEngine Endpoint Central, specifically versions prior to 11.4.2528.05, presents a significant security concern due to a sensitive information logging vulnerability. This issue allows an authenticated user with access to the logs to potentially retrieve sensitive agent tokens, which can be exploited to compromise the security posture of the affected system. It is imperative for organizations to identify if they are using an affected version and take necessary actions to mitigate this risk.

References