WSO2 Carbon OAuth vulnerabilities
2 known vulnerabilities in WSO2 Carbon OAuth from WSO2. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score
Latest first
- 7.4 High severity
In deployments of WSO2 Identity Server configured with a case-insensitive user store and a…
In deployments of WSO2 Identity Server configured with a case-insensitive user store and a case-sensitive database for identity data, mismatches in username case handling can occur. This inconsistency results in OAuth token revocation operations failing to cor
- 7.4 High severity
The system fails to invalidate existing access tokens associated with sub-organization users…
The system fails to invalidate existing access tokens associated with sub-organization users during sensitive account management operations such as password reset, role change, or sub-organization disablement. This oversight allows previously issued tokens to