CVE-2026-35383 in iTwin Platform
요약 (영어)
Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some web pages. An unauthenticated attacker could use this token to enumerate or delete certain assets. As of 2026-03-27, the token is no longer present in the web pages and cannot be used to enumerate or delete assets.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
책임이 있는
cisa-cg
예약하다
2026. 04. 02.
공개
2026. 04. 02.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 355015 | Bentley iTwin Platform Access Token 정보 공개 | 540 | 정의되지 않음 | 공식 수정 | CVE-2026-35383 |