CVE-2024-42462

CVE-2024-42462 affects upKeeper Manager (upKeeper) up to version 5.1.9. The issue is an improper authentication vulnerability that allows authentication bypass. Severity is rated CRITICAL (CVSS v3.1: AV/N, AC/L, PR/N, UI/N, S/U, C/H, I/H, A/H; CVSS v4.0: VC/H, SC/H, VI/H, SI/H, VA/H, SA/H). Docum...

CVE-2024-42466

CVE-2024-42466 affects upKeeper Manager (upKeeper Manager: through 5.1.9). The issue is an improper restriction of excessive authentication attempts, leading to authentication abuse. Public documentation in connected sources confirms the vulnerability and affected version range but does not provi...

CVE-2024-42463

The connected documents provide concrete details for CVE-2024-42463: in upKeeper Manager, versions through 5.1.9 are affected by an Authorization Bypass via a user-controlled key that abuses REST’s trust in system resources to obtain sensitive data. Practical impact is unauthorized access to sens...

CVE-2024-42464

CVE-2024-42464 affects upKeeper Manager (upKeeper) up to version 5.1.9. The issue is an Authorization Bypass Through User-Controlled Key, where REST’s trust in the system resource can be abused to obtain sensitive data. The root cause is described as an authorization bypass via a user-controlled ...

CVE-2024-42465

CVE-2024-42465 affects upKeeper Manager (upKeeper) up to version 5.1.9. The issue is an improper restriction of excessive authentication attempts, enabling authentication abuse. Root cause is inadequate rate-limiting/resources on authentication, leading to potential misuse of login mechanisms. Af...

CVE-2025-8663

Affected product: upKeeper Manager. Vulnerable versions: 5.0.0 through 5.2.11. Description: Insertion of sensitive information into a log file that could enable the use of known domain credentials. Impact: exposure of credentials via log data; practical risk described in related sources. Root cau...

CVE-2025-11446

CVE-2025-11446 affects upKeeper Manager 5.2.0–5.2.11 (pre-5.2.12). The issue is Insertion of Sensitive Information into Log File, enabling use of Known Domain Credentials. Impact is Confidentiality HIGH; Exploit details are not provided in the documents. Remediation: upgrade to 5.2.12 or later (p...