SEC Consult SA-20260616-0 :: Broken Access Control in syracom AG Secure Login (2FA) for Atlassian Jira / Confluence / Bitbucket #CVE-2026-12225

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-21 03:51 UTC
Importiert: 2026-06-21 04:51 UTC
CVSS: 8.7
Quelle-ID: full_disc
uid_hash: 0243cfb6b6ff178e4ad23b99a2a3d1ae0a721f35eb0710ab86c15c39a641d25c

Full Disclosure

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Jun 20 SEC Consult Vulnerability Lab Security Advisory < 20260616-0 >

=======================================================================

           title: Broken Access Control

product: syracom AG Secure Login (2FA) for Atlassian Jira /

                  Confluence / Bitbucket

vulnerable version: 3.4.0.x

fixed version: 3.5.0.0

      CVE number: CVE-2026-12225

impact: High...

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-12225	HIGH	8.7	HIGH	8.7			2026-06-16

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss