6.5Orta
CVE-2026-23635Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials
Açıklama
Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, a misconfiguration of the security attributes could potentially lead to Unprotected Transport of Credentials under certain circumstances. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.
Zayıflık türü (CWE):
CWE-523
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| accellion | kiteworks | < 9.2.1 | |
| kiteworks | Secure Data Forms | < 9.2.1 |
Kaynaklar ve yamalar
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:*< 9.2.1