CVE-2025-48749

Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data

Critical · published May 28, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
35.9
In the wild
Unconfirmed
What it is

🚨 Sensitive information might be slipping through the cracks! Netwrix Directory Manager versions 11.0.0.0 and earlier, as well as 11.1.25134.03, are unintentionally including sensitive data in their sent messages. 🔥 Imagine sending a postcard that not only has your message but also includes your bank account number and social security number — that's exactly what's happening here! It's like a restaurant accidentally printing personal details on every customer receipt. This flaw could lead to an absolute data breach nightmare! Unauthorized parties may intercept these messages and gain access to confidential information, potentially resulting in identity theft or corporate espionage. It's a security disaster waiting to happen!

Put simply

Imagine sending a postcard that not only has your message but also includes your bank account number and social security number — that's exactly what's happening here! It's like a restaurant accidentally printing personal details on every customer receipt. In this vulnerability, Netwrix Directory Manager fails to properly sanitize sensitive information before sending messages, leading to unintentional data exposure.

What to do

This flaw could lead to an absolute data breach nightmare! Unauthorized parties may intercept these messages and gain access to confidential information, potentially resulting in identity theft or corporate espionage. It's a security disaster waiting to happen! To protect yourself, upgrade to version 11.1.25134.04 or a later release immediately. Also, review your message settings and consider additional encryption for sensitive communications to minimize risks. 🛡️ You've got this! Fixing this issue will help you keep your data safe and secure. Let's level up your security! 💪✨

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00427 · 35.9th percentile
Published
2025-05-28T00:00Z
EPSS history
Timeline
  • 28 MAY 00:00Z
    Netwrix Directory Manager (formerly Imanami GroupID) v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data
    cvelistv5