PUBLISHED
2026-07-24 15:17
MODIFIED
2026-07-24 15:17
EPSS (Prob. Exploit)
0.38%
Top 69.2%
> DESCRIPTION
Insertion of sensitive information into sent data in the automation jobs API in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with scoped job or script read permission to obtain another user's stored OAuth refresh token via job read responses that fail to strip the refresh token.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-201: Insertion of Sensitive Information Into Sent Data - The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
> HISTORIQUE DES MODIFICATIONS
Première apparition
24/07/2026 15:17
Source: NVD
📊
ENRICHISSEMENT
01/08/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-201: Insertion of Sensitive Information Into Sent Data - The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that ac...
Total des modifications: 1
Dernière mise à jour: 3 months ago