Insertion of Sensitive Information into Log File in upKeeper Manager by upKeeper Solutions
CVE-2025-11446

7.3HIGH

Key Information:

Vendor
CVE Published:
19 November 2025

What is CVE-2025-11446?

The Insertion of Sensitive Information into Log File vulnerability in upKeeper Manager by upKeeper Solutions enables the unintended exposure of sensitive data through log files. This issue arises when known domain credentials are utilized improperly, which could lead to unauthorized access or disclosure of confidential information. Affected versions include upKeeper Manager from 5.2.0 up to, but not including, 5.2.12. Security improvements are recommended to mitigate any potential risks associated with this vulnerability.

Affected Version(s)

upKeeper Manager 5.2.0 < 5.2.12

References

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-11446 : Insertion of Sensitive Information into Log File in upKeeper Manager by upKeeper Solutions