Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Syncope

45 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2018-1322 Public exploit EPSS 20%

    Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope

    An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can recover sensitive security values using the fiql and orderby parameters.

    Apache Software Foundation Apache Syncope org.apache.syncope:syncope-core Maven