Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an attacker-controlled server if the victim submits a crafted Try It request, aka Session Hijacking. This affects API Manager 2.2.0, API Manager Analytics 2.2.0, API Microgateway 2.2.0, Data Analytics Server 3.2.0, Enterprise Integrator through 6.6.0, IS as Key Manager 5.5.0, Identity Server 5.5.0 and 5.8.0, Identity Server Analytics 5.5.0, and IoT Server 3.3.0 and 3.3.1.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
WSO2 安全漏洞
Vulnerability Description
WSO2 products中存在安全漏洞，该漏洞源于Carbon管理控制端可以将cookie信息发送给攻击者，主要受影响范围如下：API Manager 2.2.0版本, API Manager Analytics 2.2.0版本,API Microgateway 2.2.0版本,Data Analytics Server 3.2.0版本,Enterprise Integrator 从6.6.0开始版本, IS as Key Manager 5.5.0版本, Identity Server 5.5.0版本
CVSS Information
N/A
Vulnerability Type
N/A