Kiteworks Secure Data Forms Unprotected Transport of Credentials Vulnerability

Vulnerability

A vulnerability exists in Kiteworks Secure Data Forms versions prior to 9.2.1, where a misconfiguration of security attributes could lead to unprotected transport of credentials under certain circumstances.

Impact

This vulnerability could result in credentials being transmitted without proper protection, potentially allowing interception by unauthorized parties.

Remediation

Users are advised to upgrade Kiteworks to version 9.2.1 or later.

Added: Mar 25, 2026, 9:21 PM
Updated: Mar 25, 2026, 9:21 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
6.0
remediation
0.0
relevance
4.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.