Product:
Windows License Manager
Summary
Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally. This vulnerability can lead to unauthorized access to sensitive data stored in log files. Attackers with local access can exploit this issue to gain insights into system operations.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-62208 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system running Windows License Manager. By manipulating the log files, the attacker can insert sensitive information, which can then be accessed by unauthorized users. This requires low privileges, making it easier for attackers to exploit the vulnerability without needing extensive access rights.
Affected Products
- Windows License Manager: A component of Windows that manages licensing and activation, which is vulnerable to information disclosure through log file manipulation.
Mitigation
To mitigate this vulnerability, it is recommended to restrict local access to systems running Windows License Manager. Additionally, regular monitoring and sanitization of log files can help prevent sensitive information from being exposed. Keeping the system updated with the latest security patches is also crucial.