Threats tagged 'ghsa-8m68-j7cp-5rcm'

Perforce Helix Authentication Service (HAS) versions 2022.1 through 2025.2 contain a vulnerability due to the retention of a default SCIM bearer token in the installation templates. This default token is copied into the active configuration without automatic replacement, allowing an attacker who knows the token to authenticate to the SCIM API and perform user and group operations. The vulnerability was fixed in version 2026.1, released on July 17, 2026.