> CVE-2026-100288

« BACK_TO_HOME
PUBLISHED
2026-09-29 16:17
MODIFIED
2026-09-29 16:17
EPSS (Prob. Exploit)
0.07%
Top 100.0%
DATA SOURCES:
NVD 🔗 2026-09-29 CWE MITRE 🔗 2026-10-01 FIRST EPSS 🔗 2026-10-21

> DESCRIPTION

Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access to the database to obtain external identity provider tokens and active session identifiers via direct inspection of stored records.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-312

> CWE DETAILED DESCRIPTIONS

CWE-312: Cleartext Storage of Sensitive Information - The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

> HISTORIQUE DES MODIFICATIONS

Première apparition
29/09/2026 16:17
Source: NVD
📊 ENRICHISSEMENT 01/10/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-312: Cleartext Storage of Sensitive Information - The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Total des modifications: 1 Dernière mise à jour: 3 weeks ago

> REFERENCES

https://devolutions.net/security/advisories/DEVO-2026-0034/
« BACK_TO_HOME