PT-2026-48456
CVE-2026-25700
·
Published
2026-06-10
·
Updated
2026-09-04
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Apache Answer versions prior to 2.0.1
Description
Improper Restriction of Security Token Assignment occurs when administrative tokens are not invalidated after an administrator account is suspended, deleted, or deactivated. This allows continued access to administrative APIs until the token expires.
Recommendations
Upgrade to version 2.0.1.
Found an issue in the description? Have something to add? Feel free to write us 👾