Wso2 Carbon User Manager Kernel
Approved changes feed: RSS · Atom
cpe:2.3:a:wso2:wso2_carbon_user_manager_kernel:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wso2 (a7ddf9c6-bb76-50d9-a2c9-02e60ad69877) |
|---|---|
| Product | Wso2 Carbon User Manager Kernel (b9ddb828-669d-504f-9ecf-f9b94cb0efd9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3511 |
vulnerable | 2026-06-08 06:41:53.506829 |
Incorrect Authorization in Multiple WSO2 Products Allows Unauthorized Access to Registry Versioned Files
MEDIUM (4.3)
An incorrect authorization vulnerability exists in multiple WSO2 products that allows unauthorized access to versioned files stored in the registry. Due to flawed authorization logic, a malicious actor with access to the management console can exploit a specific bypass method to retrieve versioned files without proper authorization.
Successful exploitation of this vulnerability could lead to unauthorized disclosure of configuration or resource files that may be stored as registry versions, potentially aiding further attacks or system reconnaissance.
Published: 2025-06-23T08:47:55.266Z
Updated: 2025-06-23T12:43:45.452Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.