Medium WID-SEC-2026-1914 1 CVE

Redmine.org Redmine: Schwachstelle ermöglicht Offenlegung von Informationen

Published Jun 14, 2026 · Updated Jun 14, 2026 · de-DE

Vendor: Redmine Product: Redmine Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in Redmine.org Redmine ausnutzen, um Informationen offenzulegen.

Product

Redmine ist eine Web-basierte Projektmanagement Anwendung, die in Ruby on Rails geschrieben ist.

Vulnerabilities 1

Medium 5.3

CVE-2026-1836

Stored credentials in Redmine

The system stores the username and password from the login form after submitting the request. This could allow an attacker with access to the platform to return to the browser and view the login credentials.

Redmine Redmine redmine redmine Debian Ubuntu

Jun 12, 2026

Revision history

2026-06-14 #1
Initiale Fassung

References

GitHub Advisory Database vom 2026-06-14
https://github.com/advisories/GHSA-W8CJ-56RX-3GPM
INCIBE Cert Advisory vom 2026-06-14
https://www.incibe.es/en/incibe-cert/notices/aviso/stored-credentials-redmine
EU Vulnerability Database vom 2026-06-14
https://euvd.enisa.europa.eu/enisa/EUVD-2026-36424