CVE-2026-12620CWE-200

Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server

Medium · published June 19, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints.

This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:A
EPSS
0.00385 · 31.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-06-19T15:59Z
EPSS history
Timeline
  • 19 JUN 15:59Z
    Access Token Exposure in URL Parameters in GridTime™ 3000 GNSS Time Server
    cvelistv5