CVE-2026-71468

A flaw was found in acm-search-v2-api-rhel9. When the getFederationConfig function refreshes its cache, it improperly reuses a user's bearer token for all subsequent federated requests until the cache expires. This allows other authenticated users to gain unauthorized access to remote managed hub...

CVE-2026-71468 Acm-search-v2-api-rhel9: search-v2-api: cross-user bearer-token reuse via global federation-config cache

A flaw was found in acm-search-v2-api-rhel9. When the getFederationConfig function refreshes its cache, it improperly reuses a user's bearer token for all subsequent federated requests until the cache expires. This allows other authenticated users to gain unauthorized access to remote managed hub...

CVE-2026-71468

The CVE-2026-71468 entry concerns acm-search-v2-api-rhel9. When getFederationConfig refreshes its cache, it improperly reuses a single user’s bearer token for all subsequent federated requests until cache expiry. This causes information disclosure by allowing other authenticated users to access r...

EUVD-2026-56900

A flaw was found in acm-search-v2-api-rhel9. When the getFederationConfig function refreshes its cache, it improperly reuses a user's bearer token for all subsequent federated requests until the cache expires. This allows other authenticated users to gain unauthorized access to remote managed hub...

PT-2026-70868

Name of the Vulnerable Software and Affected Versions acm-search-v2-api-rhel9 affected versions not specified Description A flaw exists where the getFederationConfig function improperly reuses a user's bearer token for all subsequent federated requests during cache refreshes until the cache...