Description
Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level Admin REST APIs. Exploitation of this vulnerability allows a low-privileged user to invoke the Admin REST APIs of WSO2 products, potentially leading to full administrative account takeover. This requires the attacker to already possess a low-privileged user account and be able to obtain a valid token for it.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- WSO2 / api_control_plane4.5.0 – 4.5.0.49
- WSO2 / api_manager4.0.0 – 4.0.0.384
- WSO2 / traffic_manager4.5.0 – 4.5.0.47
- WSO2 / universal_gateway4.5.0 – 4.5.0.48
- WSO2 / WSO2 API Control Plane4.5.0 – 4.5.0.49
- WSO2 / WSO2 API Control Plane4.6.0 – 4.6.0.13
- WSO2 / WSO2 API Manager4.5.0 – 4.5.0.48
- WSO2 / WSO2 API Manager4.6.0 – 4.6.0.12
- WSO2 / WSO2 API Manager0 – 4.0.0
- WSO2 / WSO2 API Manager4.0.0 – 4.0.0.384
- WSO2 / WSO2 API Manager4.1.0 – 4.1.0.248
- WSO2 / WSO2 API Manager4.2.0 – 4.2.0.188
- WSO2 / WSO2 API Manager4.3.0 – 4.3.0.99
- WSO2 / WSO2 API Manager4.4.0 – 4.4.0.63
- WSO2 / WSO2 Carbon API Manager Rest API Common Functions9.0.174 – 9.0.174.550
- WSO2 / WSO2 Carbon API Manager Rest API Common Functions9.28.116 – 9.28.116.404
- WSO2 / WSO2 Carbon API Manager Rest API Common Functions9.29.120 – 9.29.120.221
- WSO2 / WSO2 Carbon API Manager Rest API Common Functions9.30.67 – 9.30.67.146
- WSO2 / WSO2 Carbon API Manager Rest API Common Functions9.31.86 – 9.31.86.130
- WSO2 / WSO2 Carbon API Manager Rest API Common Functions9.32.147 – 9.32.147.26
- WSO2 / WSO2 Carbon API Manager Rest API Common Functions9.33.27 – *
- WSO2 / WSO2 Carbon API Manager Rest API Utility9.20.74 – 9.20.74.392
- WSO2 / WSO2 Carbon API Manager Rest API Utility9.33.27 – *
- WSO2 / WSO2 Traffic Manager4.6.0 – 4.6.0.12
- WSO2 / WSO2 Traffic Manager4.5.0 – 4.5.0.47
- WSO2 / WSO2 Universal Gateway4.6.0 – 4.6.0.12
- WSO2 / WSO2 Universal Gateway4.5.0 – 4.5.0.48
Updated 44m ago · 8 sources