Threats tagged 'ghsa-9w3m-gv8w-f7ww'

Apache Answer through version 2.0.2 contains a vulnerability in its authentication algorithm due to incorrect implementation. Specifically, a flaw in the User Center login integration causes newly created external user sessions to omit their external identity. This omission allows subsequent requests to bypass central account suspension or deletion checks until the session expires or is revoked. The issue is fixed in version 2.0.3.