Beveiligingsadvies

CVE-2026-75015

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-14 12:55:27

Laatst bijgewerkt 2026-09-14 19:26:59

Toegewezen door apache

CVSS-score 4.9

Status PUBLISHED

Beschrijving

Insufficiently Protected Credentials vulnerability in Apache Syncope. Audit events, when sent to the configured store, are not sufficiently masked for the sensitive values they might carry on their payloads, thus allowing administrators to access such sensitive values. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.7, from 4.1.0-M0 through 4.1.2. Users are recommended to upgrade to version 4.0.8 / 4.1.3, which fix this issue.

← Alle CVE's bekijken Bekijk op cve.org ↗