Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.syncope:syncope

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
Maven Central

Advisories 3

  • In Apache Syncope 2.1.X releases prior to 2.1.7, when the Flowable extension is enabled, an administrator with workflow entitlements can…

    Affected: from 2.1.0, fixed in 2.1.7.

  • Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the…

    Affected: from 1.1.0, fixed in 1.1.8.

  • Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related…

    Affected: from 1.0.0, fixed in 1.0.9; from 1.1.0, fixed in 1.1.7.