CVE-2026-60053: Apache Answer: Residual Administrative API Key Access After Role or Account Revocation

<p>Posted by Enxin Xie on Aug 05</p>Severity: low <br /> <br /> Affected versions:<br /> <br /> - Apache Answer through 2.0.1<br /> <br /> Description:<br /> <br /> Insufficient Session Expiration vulnerability in Apache Answer.<br /> <br /> This issue affects Apache Answer: through 2.0.1.<br /> <br /> Administrative API keys remained usable after the owning administrator was demoted or the accoun