Lucene search
Veracode Vulnerability DatabaseVERACODE:6002HistoryMar 20, 2018 - 8:09 a.m.
Information Disclosure
2018-03-2008:09:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
54.9%
apache-syncope is vulnerable to information disclosure. A malicious administrator user with search permissions can gain access to sensitive information through queries with the ORDER_BY argument.
Related
cve
cve
CVE-2018-1322
2018-03-21 00:00:00
nvd
nvd
CVE-2018-1322
2018-03-20 17:29:00
osv
osv
Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope
2018-11-06 23:17:25
CVE-2018-1322
2018-03-20 17:29:00
cvelist
cvelist
CVE-2018-1322
2018-03-21 00:00:00
github
github
prion
prion
Design/Logic Flaw
2018-03-20 17:29:00
exploitpack
exploitpack
Apache Syncope 2.0.7 - Remote Code Execution
2018-09-13 00:00:00
f5
f5
K49033153 : Apache Syncope vulnerabilities CVE-2018-1321 and CVE-2018-1322
2018-07-17 00:00:00
packetstorm
packetstorm
Apache Syncope 2.0.7 Remote Code Execution
2018-09-15 00:00:00
exploitdb
exploitdb
Apache Syncope 2.0.7 - Remote Code Execution
2018-09-13 00:00:00