Threats tagged 'ghsa-9664-6254-g54f'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.4%	CVE-2026-73178syncope-core · Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Syncope High7.5EPSS 0.4%2026-09-14GCVE DatabaseCVE-2026-73178 Apache Syncope versions 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2 contain a vulnerability that allows an administrator with sufficient entitlements to access the list of existing Access Tokens via REST, including their signed JWT bodies. These tokens can be used to perform further REST requests and impersonate users with higher administrative privileges. Upgrading to versions 4.0.8 or 4.1.3 mitigates this issue. EPSS 0.4%Report on CVE-2026-73178 Vulnerability CWE-200 #ghsa-9664-6254-g54f	GCVE Database	2026-09-14

Page 1 of 1