Threats tagged 'ghsa-4mxc-3jg8-grfh'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-110535Apache Syncope · Improper Privilege Management Vulnerability High2026-11-02GCVE DatabaseCVE-2026-110535 An improper privilege management vulnerability in Apache Syncope allows non-admin users to configure impersonation for WA surrogate authentication via AuthProfile self-updates. This affects versions from 3.0.12 through 3.0.16, 4.0.0-M0 through 4.0.8, and 4.1.0-M0 through 4.1.3. Upgrading to versions 4.0.9 or 4.1.4 resolves the issue. Report on CVE-2026-110535 Vulnerability CWE-269 #ghsa-4mxc-3jg8-grfh	GCVE Database	2026-11-02

Page 1 of 1