7.5Alta

CVE-2026-14165Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5

Dassault Systèmes Tuleap Enterprise Edition Publicada: (hace 4 meses)

Descripción

An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to access data of other users without authorization.

Debilidad (CWE): CWE-639

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Dassault Systèmes Tuleap Enterprise Edition 17.0-1 – ≤ 17.0-31, 17.5-1 – ≤ 17.5-17

Referencias y parches