Skip to content
OpenAdvisories
Low WID-SEC-2025-2425 1 CVE

Zoho ManageEngine Endpoint Central: Schwachstelle ermöglicht Offenlegung von Informationen

Published Oct 27, 2025 · Updated Oct 27, 2025 · de-DE

Vendor: Zoho Product: ManageEngine Endpoint Central Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Zoho ManageEngine Endpoint Central ausnutzen, um Informationen offenzulegen.

Product

ManageEngine Endpoint Central ist eine Desktop- und Mobile-Device-Management-Software.

Vulnerabilities 1

  • Low 3.2
    CVE-2025-11248

    Sensitive Information Logged

    ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05 are vulnerable to a sensitive information logging issue. An authenticated user with access to the logs could potentially obtain the sensitive agent token.

    Zohocorp ManageEngine Endpoint Central

Revision history

  1. #1

    Initiale Fassung

References