Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2026/08/19 9:35 p.m.•61 views

CVE-2026-76385 Information Disclosure through Action Parameters in Venafi app for Splunk SOAR

In versions below 2.1.4 of the Venafi app for Splunk SOAR, a user who holds a role with permission to run actions could expose keystore and private-key passwords by invoking the get certificate action, because the action's keystorepassword and password parameters are not masked and are shown in...

4.3CVSS0.0012EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/19 12:00 a.m.•3 views

CVE-2026-76385: Cleartext Storage of Sensitive Information

In versions below 2.1.4 of the Venafi app for Splunk SOAR, a user who holds a role with permission to run actions could expose keystore and private-key passwords by invoking the get certificate action, because the action's keystorepassword and password parameters are not masked and are shown in...

4.3CVSS5.8AI score0.0012EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•23 views

PT-2026-78812

In versions below 2.1.4 of the Venafi app for Splunk SOAR, a user who holds a role with permission to run actions could expose keystore and private-key passwords by invoking the get certificate action, because the action's keystore password and password parameters are not masked and are shown in...

4.3CVSS5.3AI score0.0012EPSS
SaveExploits0References2
Rows per page
Query Builder