WSO2 Identity Server Key Manager Connector (apim-km-wso2is) vulnerabilities
1 known vulnerability in WSO2 Identity Server Key Manager Connector (apim-km-wso2is) from WSO2. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
WSO2 API Manager: Missing Authorization
This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obtaining a token from the