Most recent entries from all

EUVD-2026-368235

2026-10-05T11:51:02.445579+00:00

EUVD-2026-368235

fkie_cve-2026-87779

2026-10-05T11:51:02.445623+00:00

Insertion of sensitive information into log file vulnerability in Apache Syncope.

When AES key of non-standard length (not 16/24/32 bytes) is configured, Syncope will pad the provided value with random characters. The resulting key value is logged.

This issue affects Apache Syncope: from 3.0.15 through 3.0.16, from 4.0.3 through 4.0.7, from 4.1.0-M0 through 4.1.2.

Users are recommended to upgrade to version 4.0.8 / 4.1.3, which fix this issue.

GHSA-2987-fvqf-8g2j

2026-10-05T11:51:02.445660+00:00

Insertion of sensitive information into log file vulnerability in Apache Syncope.

When AES key of non-standard length (not 16/24/32 bytes) is configured, Syncope will pad the provided value with random characters. The resulting key value is logged.

This issue affects Apache Syncope: from 3.0.15 through 3.0.16, from 4.0.3 through 4.0.7, from 4.1.0-M0 through 4.1.2.

Users are recommended to upgrade to version 4.0.8 / 4.1.3, which fix this issue.