ManageEngine Endpoint Central Sensitive Information Logging Vulnerability

A sensitive information logging vulnerability has been identified in ManageEngine Endpoint Central, affecting versions prior to 11.4.2528.05. This vulnerability allows an authenticated user with access to the logs to potentially retrieve the sensitive agent token.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive agent tokens, which could be misused to replay valid requests.

Remediation

Users can upgrade to the latest version by logging into the Endpoint Central console, clicking on the current build number in the top right corner, and downloading the applicable update.