CVE-2025-65998 | Apache Syncope up to 2.1.14/3.0.14/4.0.2 hard-coded key

A vulnerability was found in Apache Syncope up to 2.1.14/3.0.14/4.0.2 and classified as problematic. The affected element is an unknown function. The manipulation results in use of hard-coded cryptographic key
.

This vulnerability is reported as CVE-2025-65998. The attack requires a local approach. No exploit exists.

It is suggested to upgrade the affected component.