Skip to content
OpenAdvisories

Product · WSO2

WSO2 Carborn Identity Handler

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2024-7478

    Username Enumeration via External User Stores in Multiple WSO2 Products Allows User Account Discovery

    When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or validity of usernames during authentication attempts. This oversight allows an attacker to repeatedly query the authentication mechanism w…

    WSO2 WSO2 API Manager WSO2 Identity Server WSO2 Identity Server as Key Manager