PT-2025-47447 · Upkeeper · Upkeeper Manager

Published 2025-11-19 · Updated 2025-11-19 · CVE-2025-11446

Positive Technologies (AI Summary)

CVSS v4.0

7.3

High

Base vector

AV:L/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions upKeeper Manager versions 5.2.0 through 5.2.11

Description A flaw exists in upKeeper Manager that allows for the insertion of sensitive information into log files. Specifically, the system permits the use of known domain credentials, potentially exposing this data.

Recommendations Update upKeeper Manager to version 5.2.12 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-11446

Affected Products

Upkeeper Manager

References · 6

• https://support.upkeeper.se/hc/en-us/articles/23693858370076-CVE-2025-11446-Insertion-of-Sensitive-Information-into-Log-File · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11446 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11446 · Vendor Advisory
• https://twitter.com/CVEnew/status/1991073625336926393 · Twitter Post
• https://t.me/CVEtracker/37729 · Telegram Post
• https://t.me/cveNotify/143317 · Telegram Post