WSO2 Carbon Identity Application Authentication Framework vulnerabilities
2 known vulnerabilities in WSO2 Carbon Identity Application Authentication Framework from WSO2. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.4 Critical severity
WSO2 Identity Server: Protection Mechanism Failure
The Conditional Authentication (Adaptive Authentication) script does not correctly enforce the completion of all required authentication steps when a specific multi-step pattern involving certain authenticators is configured. This allows an attacker to bypass
- 8.2 High severity
WSO2 API Manager: Incorrect Authorization
Multiple WSO2 products have been identified as vulnerable to perform user impersonatoin using JIT provisioning. In order for this vulnerability to have any impact on your deployment, following conditions must be met: * An IDP configured for federated authentic