| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| api control plane | = 4.5.0 | |
| api manager | = 2.0.0= 2.1.0= 2.2.0= 2.5.0= 2.6.0= 3.0.0= 3.1.0= 3.2.0= 3.2.1= 4.0.0= 4.1.0= 4.2.0= 4.3.0= 4.4.0= 4.5.0 | |
| api manager analytics | = 2.0.0= 2.1.0= 2.2.0= 2.5.0 | |
| data analytics server | = 3.1.0= 3.2.0 | |
| enterprise integrator | = 6.2.0= 6.3.0 | |
| enterprise mobility manager | = 2.2.0 | |
| enterprise service bus | = 5.0.0 | |
| identity server | = 5.10.0= 5.11.0= 5.2.0= 5.3.0= 5.4.0= 5.4.1= 5.5.0= 5.6.0= 5.7.0= 5.8.0= 5.9.0= 6.0.0= 6.1.0= 7.0.0= 7.1.0 | |
| identity server analytics | = 5.2.0= 5.3.0= 5.5.0= 5.6.0 | |
| identity server as key manager | = 5.10.0= 5.3.0= 5.5.0= 5.6.0= 5.7.0= 5.9.0 | |
| open banking am | = 1.4.0= 1.5.0= 2.0.0 | |
| open banking iam | = 2.0.0 | |
| open banking km | = 1.4.0= 1.5.0 | |
| traffic manager | = 4.5.0 | |
| universal gateway | = 4.5.0 |
An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing server-level information. This vulnerability affects only internal administrative interfaces. APIs exposed through the WSO2 API Manager's API Gateway remain unaffected.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン