https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 16:25:44 +0000 https://cve.radiocsirt.org/vuln/cve-2024-3511 <p><strong>Affected:</strong> WSO2 Enterprise Integrator, WSO2 API Manager, WSO2 Identity Server as Key Manager, WSO2 Identity Server, WSO2 Open Banking AM, WSO2 Open Banking IAM, WSO2 Carbon User Manager Kernel</p> <p>An incorrect authorization vulnerability exists in multiple WSO2 products that allows unauthorized access to versioned files stored in the registry. Due to flawed authorization logic, a malicious actor with access to the management console can exploit a specific bypass method to retrieve versioned files without proper authorization.</p> <p>Successful exploitation of this vulnerability could lead to unauthorized disclosure of configuration or resource files that may be stored as registry versions, potentially aiding further attacks or system reconnaissance.</p> <p><strong>Affected:</strong> WSO2 Enterprise Integrator, WSO2 API Manager, WSO2 Identity Server as Key Manager, WSO2 Identity Server, WSO2 Open Banking AM, WSO2 Open Banking IAM, WSO2 Carbon User Manager Kernel</p> <p>An incorrect authorization vulnerability exists in multiple WSO2 products that allows unauthorized access to versioned files stored in the registry. Due to flawed authorization logic, a malicious actor with access to the management console can exploit a specific bypass method to retrieve versioned files without proper authorization.</p> <p>Successful exploitation of this vulnerability could lead to unauthorized disclosure of configuration or resource files that may be stored as registry versions, potentially aiding further attacks or system reconnaissance.</p> https://cve.radiocsirt.org/vuln/cve-2024-3511