PT-2025-43944 · Zohocorp · Manageengine Endpoint Central

Published 2025-10-27 · Updated 2025-10-28 · CVE-2025-11248

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZohoCorp ManageEngine Endpoint Central versions prior to 11.4.2528.05

Description An authenticated user with access to logs may be able to obtain the sensitive agent token. The issue involves sensitive information logging.

Recommendations Update ZohoCorp ManageEngine Endpoint Central to version 11.4.2528.05 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-11248

Affected Products

Manageengine Endpoint Central

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-11248 · Security Note
• https://manageengine.com/products/desktop-central/CVE-2025-11248.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-11248 · Vendor Advisory
• https://twitter.com/MonorRac/status/1983286129907642626 · Twitter Post
• https://t.me/cveNotify/140633 · Telegram Post
• https://t.me/CVEtracker/35834 · Telegram Post