PT-2026-56457 · Undefined · Undefined

Geochen · Publicado 2026-07-08 · Atualizado 2026-07-08 · CVE-2026-15036

Mitre

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

A vulnerability was determined in Harness up to 2.28.2. This vulnerability affects the function getAuthorizedSpaces of the file app/api/controller/gitspace/list all.go of the component gitspaces Endpoint. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Correção

IDOR

Improper Authorization

Enumeração de Fraquezas

CWE-639

CWE-285

Identificadores relacionados

CVE-2026-15036

Produtos afetados

Undefined

Referências · 7

• 🔥 https://github.com/harness/harness/issues/3689 · Exploit
• https://github.com/harness/harness · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15036 · Nota de Segurança
• https://vuldb.com/vuln/376787 · Nota
• https://vuldb.com/cve/CVE-2026-15036 · Nota
• https://vuldb.com/vuln/376787/cti · Nota
• https://vuldb.com/submit/851013 · Nota