Vendor
JanssenProject
3 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.2
Janssen Config API returns results without scope verification
The Janssen Project is an open-source identity and access management (IAM) platform. Prior to version 1.8.0, the Config API returns results without scope verification. This has a large internal surface attack area that exposes all sorts of information from th…