CVE-2026-126331
2026-11-11
21h24 +00:00
21h24 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with delegated user-viewing permissions to obtain users' API key secret hashes via the user list API response.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Insertion of Sensitive Information Into Sent Data The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor. |
