CVSS
No CVSS.
T
he OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials
References
Configurations
No configuration.
History
27 Feb 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-27 16:16
Updated : 2026-03-02 20:30
NVD link : CVE-2026-3277
Mitre link : CVE-2026-3277
CVE.ORG link : CVE-2026-3277
JSON object : View
Products Affected
No product.
CWE
CWE-312
Cleartext Storage of Sensitive Information