CVE-2026-126327
2026-11-11
22h17 +00:00
22h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an authenticated user without the permission to view passwords to obtain historical entry passwords via the connection history API.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Exposure of Sensitive Information to an Unauthorized Actor The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
