CVE-2026-107187: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor in Eptura Archibus

This vulnerability (CWE-200) in Eptura Archibus permits unauthorized actors to access sensitive database information by sending a DWR request with a specified workflow rule. The flaw enables reading of usernames and passwords from the database. It can be chained with an authentication bypass vulnerability to perform these reads without authentication. Potential for database write and delete operations exists but remains untested. The CVSS 3.1 score is 8.5 (high), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and high confidentiality impact with limited integrity impact and no availability impact. Affected versions are all versions prior to 2025.02.

An attacker with low privileges can exploit this vulnerability remotely to access highly sensitive information such as usernames and passwords from the database, potentially compromising confidentiality. The ability to chain this with an authentication bypass increases the risk by removing authentication requirements. Although write and delete operations have not been confirmed, their potential presence could further impact data integrity.

No patch or official fix information is currently available. Since this is not a cloud service, remediation depends on vendor updates or configuration changes. Users should monitor the vendor advisory for patch releases and apply them promptly once available. Until then, restrict access to the affected system and monitor for suspicious DWR requests involving workflow rules.