Security
Loading…

CVE-2026-100288

HIGHCVSS 7.2
View on NVD← Back to search
Description

Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access to the database to obtain external identity provider tokens and active session identifiers via direct inspection of stored records.

Timeline
Published:September 29th, 2026 4:17 PM
Last modified:September 30th, 2026 9:16 PM
CVSS Scoring

CVSS v3: 7.2 (HIGH)

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

Weaknesses (CWE)
CWE-312
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute