« Volver al listado

CVE-2026-5380

Estado: AnalizadaMedia (5.3)—

An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. This is an instance of CWE-522: Insufficiently Protected Credentials, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N (5.3 Medium). This issue was fixed in version 4.0.260204.2 of the runZero Platform.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Runzero — Runzero Platform

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-5380",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-5380",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-04-07T15:03:36.808071Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "44488dab-36db-4358-99f9-bc116477f914",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.6
      }
    ]
  },
  "affected": [
    {
      "source": "44488dab-36db-4358-99f9-bc116477f914",
      "affectedData": [
        {
          "vendor": "runZero",
          "product": "Platform",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "4.0.260204.2",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-04-07T15:17:48.070",
  "references": [
    {
      "url": "https://help.runzero.com/docs/release-notes/#402602042",
      "tags": [
        "Release Notes"
      ],
      "source": "44488dab-36db-4358-99f9-bc116477f914"
    },
    {
      "url": "https://www.runzero.com/advisories/runzero-platform-cleartext-exposure-cve-2026-5380/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "44488dab-36db-4358-99f9-bc116477f914"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "44488dab-36db-4358-99f9-bc116477f914",
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved. This is an instance of CWE-522: Insufficiently Protected Credentials, and has an estimated CVSS score of\nCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N (5.3 Medium). This issue was fixed in version 4.0.260204.2 of the runZero Platform."
    }
  ],
  "lastModified": "2026-06-17T10:58:56.170",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:runzero:runzero_platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "80353729-6385-4864-AF94-5EFCA6C45982",
              "versionEndExcluding": "4.0.260204.2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "44488dab-36db-4358-99f9-bc116477f914"
}