Sicherheit & Regelkonformität
Wir halten die höchsten Standards ein, um Ihre Daten zu schützen und Vertrauen zu gewährleisten.
DEVO-2026-0006
PowerShell Universal is affected by a cleartext storage vulnerability.
Betroffene Produkte
Änderungsprotokoll
Initial publication - 2026-02-27
6.8 Medium - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
OpenID Connect configuration stored in cleartext
The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials.
Betroffene Produkte
CVE(s)
CVE-2026-3277
Behebungen und Workarounds
Upgrade to PowerShell Universal 2026.1.3 or later.