Maven/org.wso2.is:identity-server-parent CVE-2024-7096: medium 4.2, EPSS 0.74%
WSO2 products vulnerable to privilege escalation due to business logic flaw in SOAP admin services
Action: Upgrade org.wso2.is:identity-server-parent to 7.1.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.2.0 | 7.1.0 | - |
Fixed versions
| 7.1.0 |
Sources
- osv: GHSA-j63j-7r7r-5v4j#Maven/org.wso2.is:identity-server-parent
- https://nvd.nist.gov/vuln/detail/CVE-2024-7096
- https://github.com/wso2/docs-security/blob/cfd53689909eef62fc5427e193e35e7df8ab1ef8/en/docs/security-announcements/security-advisories/2024/WSO2-2024-3573.md
- https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3573
CVE-2024-7096 · published · modified · JSON