IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-06-10 16:16

MODIFIED

2026-06-10 16:16

EPSS (Prob. Exploit)

0.45%

Top 61.0%

DATA SOURCES:

NVD 🔗 2026-06-10 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-01 OSV 🔗 2026-11-02

> DESCRIPTION

Improper Restriction of Security Token Assignment vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Previously issued administrative tokens were not invalidated after an administrator account was suspended, deleted, or deactivated, allowing continued access to administrative APIs until the token expired. Users are recommended to upgrade to version 2.0.1, which fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-1259

> CWE DETAILED DESCRIPTIONS

CWE-1259: Improper Restriction of Security Token Assignment - The System-On-A-Chip (SoC) implements a Security Token mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Tokens are improperly protected, such as improperly restricting the assignment to trusted components.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Apache Answer: AdminToken not invalidated after admin deactivation

AFFECTED PACKAGES:

Unknown / Unknown

24 versions affected

ALIASES:

GHSA-4gw2-vg4x-7p29, GO-2026-6249

> HISTORIQUE DES MODIFICATIONS

Première apparition

10/06/2026 16:16

Source: NVD

📊 ENRICHISSEMENT 01/11/2026 06:59

CWE

Champ modifié: Description CWE

Ancienne valeur:

Nouvelle valeur:

📊 ENRICHISSEMENT 01/07/2026 06:01

CWE