Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

AFFECTED PRODUCTS

WSO2 API Manager : 2.2.0 , 2.5.0 , 2.6.0 , 3.0.0 or earlier

WSO2 IS as Key Manager : 5.5.0 , 5.6.0 , 5.7.0 , 5.9.0 or earlier

WSO2 Identity Server : 5.4.0 , 5.4.1 , 5.5.0 , 5.6.0 , 5.7.0 , 5.8.0 , 5.9.0

WSO2 Open Banking AM : 1.3.0 , 1.4.0

WSO2 Open Banking API Manager : 2.6.0

WSO2 Open Banking IS as Key Manager : 5.7.0

WSO2 Open Banking KM : 1.3.0 , 1.4.09.0 or earlier


OVERVIEW

A potential authorization bypass vulnerability has been identified in basic autentication flow of the REST APIs.

...