upKeeper Solutions upKeeper Manager Insertion of Sensitive Information into Log File Vulnerability

A vulnerability exists in upKeeper Solutions upKeeper Manager versions 5.2.0 prior to 5.2.12, allowing sensitive user information to be logged when clients connect from upKeeper Manager DSOS. This issue enables the use of known domain credentials to access the logged information.

Impact

Exploitation of this vulnerability allows for the unauthorized use of logged sensitive information to request additional details about client computers from the upKeeper Manager Client API.

Remediation

Users can update upKeeper Manager to version 5.2.13.1 or later to address this vulnerability.