Threats Tagged 'ghsa-5h4x-9649-5v6g'

1 threat

Threats Tagged 'ghsa-5h4x-9649-5v6g'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.5%	CVE-2026-73370Apache Syncope · Incorrect Authorization Critical9.8EPSS 0.5%2026-09-14CVE Database V5CVE-2026-73370 Incorrect Authorization vulnerability in Apache Syncope. Delegated administration security checks performed by Reconciliation service's pull and push, being incomplete, could accept calls by administrator not provided with adequate entitlements. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.7, from 4.1.0-M0 through 4.1.2. Users are recommended to upgrade to version 4.0.8 / 4.1.3, which fix this issue. EPSS 0.5%Vulnerability Apache Software Foundation #cwe-863 #ghsa-5h4x-9649-5v6g	CVE Database V5	2026-09-14

Showing 1–1 of 1 result