CVE-2024-2323Published
Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discovery
cve-program · CVE-2024-2323
PublishedWSO2 Enterprise Integrator
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 Enterprise Integrator",
"versions": [
{
"status": "unknown",
"version": "0",
"lessThan": "6.6.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "6.6.0",
"lessThan": "6.6.0.204",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}WSO2 Identity Server
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 Identity Server",
"versions": [
{
"status": "unknown",
"version": "0",
"lessThan": "5.10.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "5.10.0",
"lessThan": "5.10.0.286",
"versionType": "custom"
},
{
"status": "affected",
"version": "5.11.0",
"lessThan": "5.11.0.344",
"versionType": "custom"
},
{
"status": "affected",
"version": "6.0.0",
"lessThan": "6.0.0.188",
"versionType": "custom"
},
{
"status": "affected",
"version": "6.1.0",
"lessThan": "6.1.0.150",
"versionType": "custom"
},
{
"status": "affected",
"version": "7.0.0",
"lessThan": "7.0.0.35",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}WSO2 API Manager
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 API Manager",
"versions": [
{
"status": "unknown",
"version": "0",
"lessThan": "3.1.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "3.1.0",
"lessThan": "3.1.0.268",
"versionType": "custom"
},
{
"status": "affected",
"version": "3.2.0",
"lessThan": "3.2.0.354",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}WSO2 Open Banking AM
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 Open Banking AM",
"versions": [
{
"status": "unknown",
"version": "0",
"lessThan": "2.0.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "2.0.0",
"lessThan": "2.0.0.315",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}WSO2 Identity Server as Key Manager
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 Identity Server as Key Manager",
"versions": [
{
"status": "unknown",
"version": "0",
"lessThan": "5.10.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "5.10.0",
"lessThan": "5.10.0.283",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}WSO2 Open Banking IAM
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 Open Banking IAM",
"versions": [
{
"status": "unknown",
"version": "0",
"lessThan": "2.0.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "2.0.0",
"lessThan": "2.0.0.335",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}org.wso2.carbon:org.wso2.carbon.user.core
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 Carbon User Manager Kernel",
"packageName": "org.wso2.carbon:org.wso2.carbon.user.core",
"versions": [
{
"status": "affected",
"version": "4.5.0",
"lessThan": "4.5.0.4",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.5.3",
"lessThan": "4.5.3.34",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.6.0",
"lessThan": "4.6.0.137",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.6.1",
"lessThan": "4.6.1.111",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.7.1",
"lessThan": "4.7.1.51",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.9.0",
"lessThan": "4.9.0.54",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.10.9",
"lessThan": "4.10.9.20",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}Original source record · Cite this exact observation · Complete original publisher JSON