Description
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | Xtraction | — | 2026.4 |