A vulnerability, which was classified as problematic, was found in Bentley iTwin Platform 2026-03-27. Affected by this vulnerability is an unknown functionality of the component Access Token Handler. The manipulation results in inclusion of sensitive information in source code.
This vulnerability is cataloged as CVE-2026-35383. The attack may be launched remotely. There is no exploit available.
You should upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-35383 | Bentley iTwin Platform 2026-03-27 Access Token sensitive information in source (EUVD-2026-18544)
A vulnerability, which was classified as problematic, was found in Bentley iTwin Platform 2026-03-27. Affected by this vulnerability is an unknown…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
CISA-SSVC-Triage (vulnrichment)CVE-2026-35383
Exploitation: poc (PoC verfügbar)Automatable: yes (Automatisierbar)Technical Impact: partial (Teilweise)
Quelle: CISA-ADP vulnrichment · Stand 2026-04-14T14:04:23.166787Z · CISA Coordinator
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referenceraw.githubusercontent.com
-
Web Referencecesium.com