Multiple WSO2 products have been identified as vulnerable to perform user impersonatoin using JIT provisioning. In order for this vulnerability to have any impact on your deployment, following conditions must be met:
Attacker should have:
When all preconditions are met, a malicious actor could use JIT provisioning flow to perform user impersonation.
{ "nvd_published_at": "2023-12-15T10:15:09Z", "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-01-05T22:09:43Z" }