← Database

CVE-2026-105813

MEDIUM CVSS: 6.3 Published: 2026-11-10 Modified: 2026-11-10

Description

Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's session token.

Affected Platforms

Unknown

Weakness Type

CWE-312

References