Product:
Windows License Manager
Summary
Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally. This vulnerability can lead to unauthorized access to sensitive data stored in log files. It is crucial for users to be aware of this issue to protect their information.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-62209 |
Exploitation
To exploit this vulnerability, an attacker with local access can manipulate the Windows License Manager to insert sensitive information into log files. By gaining access to these logs, the attacker can disclose confidential information without requiring elevated privileges. This makes the attack relatively easy for someone with local access to the system.
Affected Products
- Windows License Manager: Vulnerable to information disclosure due to sensitive data being logged.
Mitigation
To mitigate this vulnerability, it is recommended to restrict local access to systems running Windows License Manager. Additionally, users should regularly monitor and manage log files to ensure that sensitive information is not being recorded. Keeping the system updated with the latest security patches can also help reduce the risk of exploitation.