CVE-2026-15102: Cleartext Transmission of Sensitive Information in ADP Desktop SDK
Published Oct 14, 2026
·Updated
ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk services.
Affected Software
1 affected component
Autodesk ADP Desktop SDK
Event History
Oct 14, 2026
CVE Published
via MITRE·04:29 PM
Data Sourced
via MITRE·04:29 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What would an attacker need to exploit this issue?
The vulnerability has a local attack vector, requires low privileges, high attack complexity, and user interaction. It is not described as remotely exploitable without local access.
2
What is the potential security impact after successful exploitation?
Successful exploitation can lead to unauthorized access to Autodesk services. The severity vector indicates high potential impact to confidentiality, integrity, and availability, with impact extending beyond the initially affected security scope.