PT-2025-35698 · Unknown · Upkeeper Manager

Published 2025-09-03 · Updated 2025-09-03 · CVE-2025-8663

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N

Name of the Vulnerable Software and Affected Versions upKeeper Manager versions 5.0.0 through 5.2.11

Description An insertion of sensitive information into a log file issue exists in upKeeper Manager, potentially allowing the use of known domain credentials.

Recommendations Update upKeeper Manager to version 5.2.12 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-8663

Affected Products

Upkeeper Manager

References · 6

• https://support.upkeeper.se/hc/en-us/articles/22107280228252-CVE-2025-8663-Insertion-of-Sensitive-Information-into-Log-File · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-8663 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8663 · Security Note
• https://t.me/CVEtracker/31576 · Telegram Post
• https://twitter.com/CVEnew/status/1963161323090682074 · Twitter Post
• https://t.me/cveNotify/134165 · Telegram Post