Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In affected versions of HAS, the installatio…

{
                    "vendor": "Perforce",
                    "product": "Helix Authentication Service",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "2022.1",
                            "lessThanOrEqual": "2025.2",
                            "changes": [
                                {
                                    "at": "2026.1",
                                    "status": "unaffected"
                                }
                            ],
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }