Apache Syncope Authorization Bypass

Apache Syncope, a powerful identity management system, is affected by an authorization bypass vulnerability.

This issue, present in versions 3.0.0-M0 to 3.0.16, 4.0.0-M0 to 4.0.7, and 4.1.0-M0 to 4.1.2, allows unauthorized users to bypass realms filter, potentially accessing restricted data.

Users are advised to upgrade to version 4.0.8 or 4.1.3 to mitigate this risk.