6.5Orta

CVE-2026-23635Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials

kiteworks Secure Data Forms Yayım: (7 ay önce)

Açıklama

Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, a misconfiguration of the security attributes could potentially lead to Unprotected Transport of Credentials under certain circumstances. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.

Zayıflık türü (CWE): CWE-523

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
accellion kiteworks < 9.2.1
kiteworks Secure Data Forms < 9.2.1

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (1)

  • cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:* < 9.2.1