upKeeper Manager Sensitive Information Log Insertion Vulnerability

A vulnerability allowing the insertion of sensitive information into log files has been identified in upKeeper Manager versions 5.0.0 prior to 5.2.12. This issue arises from the administration web or API, where users can access event history containing sensitive data. The vulnerability could be exploited to use this information for unauthorized access to file shares and their contents.

Impact

Exploitation of this vulnerability could lead to unauthorized access to file shares and their files, using information obtained from the event history.

Remediation

Users can update to version 5.2.13.1 or later to address this vulnerability.