Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Syncope | Apache | 1.1.6 | 1.1.6 |
| Syncope | Apache | 1.1.3 | 1.1.3 |
| Syncope | Apache | 1.1.1 | 1.1.1 |
| Syncope | Apache | 1.1.5 | 1.1.5 |
| Syncope | Apache | 1.1.0 | 1.1.0 |
| Syncope | Apache | 1.1.2 | 1.1.2 |
| Syncope | Apache | 1.1.4 | 1.1.4 |
| Syncope | Apache | 1.1.7 | 1.1.7 |