CVE-2026-126332
2026-11-11
21h27 +00:00
21h27 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Improper access control in the autofill vault search in Devolutions Server 2026.3.13.0 and earlier allows an authenticated user with only view permission on a shared entry to obtain its password in clear text via a linked credential entry created in their private vault.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Improper Access Control The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
