Apache Syncope AuthProfile value escalation via self-service update (CVE-2026-110535)
Non-admin users can configure impersonation for WA surrogate authentication through self-updates.
55
Vulnerability2 · 2 reads
CVE-2026-110535
Improper Privilege Management in Apache Syncope (AuthProfile self-updates)
- CVSS 3.1
- 8.8 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Improper Privilege Management in Apache Syncope allows non-admin users to configure impersonation for WA surrogate authentication through AuthProfile self-updates. This can be triggered by authenticated users via self-service access. An attacker gains elevated privileges. All users of affected versions 3.0.12 through 3.0.16, 4.0.0-M0 through 4.0.8, and 4.1.0-M0 through 4.1.3 are affected.
What to do: Upgrade to Apache Syncope 4.0.9 / 4.1.4.
| Product | Affected | Fixed in |
|---|---|---|
| Apache Syncope | from 3.0.12 through 3.0.16, from 4.0.0-M0 through 4.0.8, from 4.1.0-M0 through 4.1.3 | 4.0.9 / 4.1.4 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Improper Privilege Management vulnerability in Apache Syncope. AuthProfile self-updates allow non-admin users to configure impersonation for WA surrogate authentication. This issue affects Apache Syncope: from 3.0.12 through 3.0.16, from 4.0.0-M0 through 4.0.8, from 4.1.0-M0 through 4.1.3. Users are recommended to upgrade to version 4.0.9 / 4.1.4, which fix this issue.
- Weakness
- CWE-269
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H