WID-SEC-W-2026-0513

DeutschShown in its original language — a full translation is planned for a future version.

WSO2 API Manager: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

view advisory published 2026-02-24

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in WSO2 API Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen und sich als lokaler Benutzer auszugeben.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-1524US	high8.1	0.30% (22nd)	—	2026-02-24
When the "Silent Just-In-Time Provisioning" feature is enabled for a federated identity provider (IDP) there is a risk that a local user store user's information may be replaced d…

references

External citations — patches, advisories, analysis.

EU Vulnerability Database vom 2026-02-24external
NIST Vulnerability Database vom 2026-02-24external
WSO2 Security Advisoryexternal
WID-SEC-W-2026-0513 - CSAF Versionself
WID-SEC-2026-0513 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan