CVE

CVE-2018-1322

CVE-2018-1322

An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11 and 2.0.x before 2.0.8 can recover sensitive security values using the fiql and orderby parameters.

Source: CVE-2018-1322

Exit mobile version