Threats tagged 'ghsa-jxw5-56mj-vrhj'

An Improper Privilege Management vulnerability exists in Apache Syncope allowing delegations to be created or updated with roles not owned by the delegating user or outside the allowed realm subtree. This affects Apache Syncope versions from 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2. Upgrading to versions 4.0.8 or 4.1.3 addresses this issue.