Product:
Trust Protection Foundation
Summary
An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server’s vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.5 | CVE-2026-0240 |
Exploitation
To exploit this vulnerability, an attacker must be authenticated and have access to the server. By leveraging the information disclosure flaw, the attacker can extract sensitive data from the server’s vault, which can then be used to impersonate users and alter configuration settings without authorization.
Affected Products
- Trust Protection Foundation: Vulnerable to information disclosure, allowing attackers to access sensitive information.
Mitigation
To mitigate this vulnerability, it is recommended to implement strict access controls and monitor user activities within the Trust Protection Foundation environment. Regularly updating the software and applying security patches can also help reduce the risk of exploitation.