title: Apache ShenYu Admin ultra vires
description: Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu.
ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own.
This issue affects Apache ShenYu: 2.5.0.
Upgrade to Apache ShenYu 2.5.1 or apply patch  https://github.com/apache/shenyu/pull/3958 https://github.com/apache/shenyu/pull/3958 .
problem types: CWE-269 Improper Privilege Management
affected:
{
defaultStatus: unaffected
product: Apache ShenYu
vendor: Apache Software Foundation
versions:
lessThanOrEqual: 2.5.0, status: affected, version: 0, versionType: maven
}
metrics:
other: [
content: {'text': 'low'}
type: Textual description of severity
]