CVE-2018-1322 json
Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope
published 2018-03-20 8 y ago modified 2026-06-17 4 mo ago also GHSA-v3vf-2r98-xw8w , EUVD-2018-0778
- cvss
- 4.9
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 19.9%
- EPSS 19.9% chance of exploitation in 30 days, percentile 97%
- public exploits
- 1
- Exploit-DB
Summary
An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can recover sensitive security values using the fiql and orderby parameters.
Patch / fix
- maven org.apache.syncope:syncope-core 1.2.11, 2.0.8
- apache syncope 1.2.11, 2.0.8
Timeline
- Published
- First public exploit (EDB-45400)
Exploit prediction
19.92% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-45400 Apache Syncope 2.0.7 - Remote Code Execution webapps, 2018-09-13
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 4.9 | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
| NVD | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:P/I:N/A:N |
| GitHub | 3.0 | 4.9 | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| maven | org.apache.syncope:syncope-core | <1.2.11 >=2.0.0, <2.0.8 |
1.2.11 2.0.8 |
Affected products
- Apache Software Foundation Apache Syncope
Classification
- Weakness
-
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
-
github.com
/apache/syncope/commit/44a5ca0fbd357b8b5d81aa9313fb01cca30d8ad
web
-
github.com
/apache/syncope/commit/735579b6f987b407049ac1f1da08e675d957c3e
web
-
exploit-db.com
/exploits/45400/
exploit, third-party-advisory, vdb-entry
-
syncope.apache.org
/security.html#CVE-2018-1322:_Information_disclosure_via_FIQL_and_ORDER_BY_sorting
web, mitigation, vendor-advisory
-
securityfocus.com
/bid/103507
vdb-entry, web, third-party-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2018-1322
advisory
-
github.com
/advisories/GHSA-v3vf-2r98-xw8w
advisory
-
github.com
/apache/syncope
package
-
exploit-db.com
/exploits/45400
web
Sources
- CVE List CVE-2018-1322
- GitHub Advisory GHSA-v3vf-2r98-xw8w
- NVD CVE-2018-1322
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.